Actions
Bug #146
closed
Missing validation for alias usage
Start date:
11/08/2009
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
Description
Aliases are allowed to be used in several ways that breaks the ruleset.
firewall_nat_edit.php needs a check to only allow a single IP host alias. firewall_aliases_edit.php needs a check to not allow adding IPs to an alias used in a port forward entry.
Host and network aliases can be entered in the Port box, and port aliases in the src/dst boxes. They don't show up in autocompletion, but are used if name is typed in manually, breaking the ruleset.
Updated by Ermal Luçi almost 15 years ago
- Status changed from New to Resolved
- % Done changed from 70 to 100
Applied in changeset 1e578a7f10843f470d2bf5274bbef695a14bb9d0.
Updated by Chris Buechler almost 15 years ago
- Status changed from Resolved to Feedback
- Target version set to 2.0
needs testing
Actions