+static bool
+check_families(struct uci_element *e, struct fw3_redirect *r)
+{
+ if (r->family == FW3_FAMILY_ANY)
+ return true;
+
+ if (r->_src && r->_src->family && r->_src->family != r->family)
+ {
+ warn_elem(e, "refers to source zone with different family");
+ return false;
+ }
+
+ if (r->_dest && r->_dest->family && r->_dest->family != r->family)
+ {
+ warn_elem(e, "refers to destination zone with different family");
+ return false;
+ }
+
+ if (r->ipset.ptr && r->ipset.ptr->family &&
+ r->ipset.ptr->family != r->family)
+ {
+ warn_elem(e, "refers to ipset with different family");
+ return false;
+ }
+
+ if (r->ip_src.family && r->ip_src.family != r->family)
+ {
+ warn_elem(e, "uses source ip with different family");
+ return false;
+ }
+
+ if (r->ip_dest.family && r->ip_dest.family != r->family)
+ {
+ warn_elem(e, "uses destination ip with different family");
+ return false;
+ }
+
+ if (r->ip_redir.family && r->ip_redir.family != r->family)
+ {
+ warn_elem(e, "uses redirect ip with different family");
+ return false;
+ }
+
+ return true;
+}
+
+static bool
+compare_addr(struct fw3_address *a, struct fw3_address *b)
+{
+ if (a->family != FW3_FAMILY_V4 || b->family != FW3_FAMILY_V4)
+ return false;
+
+ return ((a->address.v4.s_addr & a->mask.v4.s_addr) ==
+ (b->address.v4.s_addr & a->mask.v4.s_addr));
+}
+
+static bool
+resolve_dest(struct uci_element *e, struct fw3_redirect *redir,
+ struct fw3_state *state)
+{
+ struct fw3_zone *zone;
+ struct fw3_address *addr;
+ struct list_head *addrs;
+
+ if (!redir->ip_redir.set)
+ return false;
+
+ list_for_each_entry(zone, &state->zones, list)
+ {
+ addrs = fw3_resolve_zone_addresses(zone, NULL);
+
+ if (!addrs)
+ continue;
+
+ list_for_each_entry(addr, addrs, list)
+ {
+ if (!compare_addr(addr, &redir->ip_redir))
+ continue;
+
+ strncpy(redir->dest.name, zone->name, sizeof(redir->dest.name));
+ redir->dest.set = true;
+ redir->_dest = zone;
+
+ break;
+ }
+
+ fw3_free_list(addrs);
+
+ if (redir->_dest)
+ return true;
+ }
+
+ return false;
+}
+
+static bool
+check_local(struct uci_element *e, struct fw3_redirect *redir,
+ struct fw3_state *state)
+{
+ if (redir->target != FW3_FLAG_DNAT)
+ return false;
+
+ if (!redir->ip_redir.set)
+ redir->local = true;
+
+ return redir->local;
+}
+