diff options
| author | chantra <chantra@debuntu.org> | 2010-06-11 16:23:03 +0200 |
|---|---|---|
| committer | David Sommerseth <dazo@users.sourceforge.net> | 2010-06-11 16:23:03 +0200 |
| commit | a881843bf2101e77d15cb88105684288655055cb (patch) | |
| tree | 32d183af71179ce382ef2658fff62fecb350b5ac | |
| parent | e0ca5fdf8f54c3c264fcb1ddaf0adbde212d858a (diff) | |
| download | openvpn-a881843bf2101e77d15cb88105684288655055cb.tar.gz openvpn-a881843bf2101e77d15cb88105684288655055cb.tar.xz openvpn-a881843bf2101e77d15cb88105684288655055cb.zip | |
Handle non standard subnets in PF grammar
Allow subnets for like 192.168.100.8/28 to be understood. A warning
will be logged when subnet is incorrect and is being corrected to what
is assumed to be correct.
Signed-off-by: chantra <chantra@debuntu.org>
Acked-by: Gert Doering <gert@greenie.muc.de>
Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
| -rw-r--r-- | pf.c | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -109,6 +109,11 @@ add_subnet (const char *line, const char *prefix, const int line_num, struct pf_ return false; } netmask = netbits_to_netmask (netbits); + if ((network.s_addr & htonl (netmask)) != network.s_addr) + { + network.s_addr &= htonl (netmask); + msg (M_WARN, "WARNING: PF: %s/%d: incorrect subnet %s/%d changed to %s/%d", prefix, line_num, line, netbits, inet_ntoa (network), netbits); + } } else { |