Revision 6e8c4db2
Added by fl0l0u about 4 years ago
| src/etc/inc/util.inc | ||
|---|---|---|
| 3427 | 3427 |
$index++; |
| 3428 | 3428 |
if ((($proto == 'inet') && (is_ipaddrv4(trim($rule[$index])) || (trim($rule[$index]) == "{clientip}"))) ||
|
| 3429 | 3429 |
(($proto == 'inet6') && (is_ipaddrv6(trim($rule[$index])) || (trim($rule[$index]) == "{clientipv6}")))) {
|
| 3430 |
$tmprule .= "from {$rule[$index]} ";
|
|
| 3430 |
if($GLOBALS['attributes']['framed_ip']) {
|
|
| 3431 |
$framed_ip = $GLOBALS['attributes']['framed_ip']; |
|
| 3432 |
$tmprule .= "from {$framed_ip} ";
|
|
| 3433 |
} else {
|
|
| 3434 |
$tmprule .= "from {$rule[$index]} ";
|
|
| 3435 |
} |
|
| 3431 | 3436 |
$index++; |
| 3432 | 3437 |
} else {
|
| 3433 | 3438 |
syslog(LOG_WARNING, "Error parsing rule {$rule_orig}: Invalid source host '{$rule[$index]}'.");
|
Also available in: Unified diff
Cisco-AVPair + Framed-IP-Address: correcting clientip
Workaround to substitute Framed-IP-Address value in Cisco-AVPair ACL's where {clientip} is used