From: jow <jow@3c298f89-4303-0410-b956-a3cf2f4a3e73>
Date: Tue, 28 Sep 2010 11:11:11 +0000 (+0000)
Subject: [package] firewall: don't setup nat reflection if negations are used
X-Git-Url: https://git.archive.openwrt.org/?a=commitdiff_plain;h=889cf1f8c372050c30dc35b269d04187e2a2c347;p=openwrt.git

[package] firewall: don't setup nat reflection if negations are used


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23142 3c298f89-4303-0410-b956-a3cf2f4a3e73
---

diff --git a/package/firewall/files/reflection.hotplug b/package/firewall/files/reflection.hotplug
index 027d2ed8b1..b3b5e5ecce 100644
--- a/package/firewall/files/reflection.hotplug
+++ b/package/firewall/files/reflection.hotplug
@@ -82,6 +82,9 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
 
 				[ "$proto" = tcpudp ] && proto="tcp udp"
 
+				[ "${inthost#!}" = "$inthost" ] || return 0
+				[ "${exthost#!}" = "$exthost" ] || return 0
+
 				local p
 				for p in ${proto:-tcp udp}; do
 					case "$p" in