mirror of
git://git.proxmox.com/git/pve-firewall.git
synced 2025-01-04 09:17:58 +03:00
4d1ca18ee6
without this additional conditions, it's possible to break the firewall by setting an ICMP-type value as dport for non-ICMP protocols, e.g. 'any' for 'tcp'. by rejecting the invalid rule/parameter, the rest of the ruleset is still applied properly, and the error messages are a lot more informative as well. Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com> |
||
---|---|---|
debian | ||
src | ||
test | ||
Makefile |