summaryrefslogtreecommitdiffstats
path: root/awall
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2012-07-20 10:15:27 +0000
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2012-07-20 10:15:27 +0000
commit7481a54f89d9fe13bc450bb8035082448b8b2acf (patch)
tree77b455b1045e3a30e18718871f6977e698562bb2 /awall
parent3911de118f61f8801b859e0683cea06f21583c00 (diff)
downloadawall-7481a54f89d9fe13bc450bb8035082448b8b2acf.tar.bz2
awall-7481a54f89d9fe13bc450bb8035082448b8b2acf.tar.xz
disallow dnat option with actions other than accept
Diffstat (limited to 'awall')
-rw-r--r--awall/modules/filter.lua3
1 files changed, 3 insertions, 0 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua
index 5da8f91..07d5df9 100644
--- a/awall/modules/filter.lua
+++ b/awall/modules/filter.lua
@@ -36,6 +36,9 @@ function Filter:trules()
local res = {}
if self.dnat then
+ if self.action ~= 'accept' then
+ self:error('dnat option not allowed with '..self.action..' action')
+ end
if not self.dest then
self:error('Destination address must be specified with DNAT')
end