if ($source){
if($source =~ m/^(\+)(\S+)$/){
- die "no such netgroup $2" if !$cluster_conf->{ipset}->{$2};
+ die "no such ipset $2" if !$cluster_conf->{ipset}->{$2};
push @cmd, "-m set --match-set PVEFW-$2 src";
}elsif ($source =~ m/^(\d+)\.(\d+).(\d+).(\d+)\-(\d+)\.(\d+).(\d+).(\d+)$/){
if ($dest){
if($dest =~ m/^(\+)(\S+)$/){
- die "no such netgroup $2" if !$cluster_conf->{ipset}->{$2};
+ die "no such ipset $2" if !$cluster_conf->{ipset}->{$2};
push @cmd, "-m set --match-set PVEFW-$2 dst";
}elsif ($dest =~ m/^(\d+)\.(\d+).(\d+).(\d+)\-(\d+)\.(\d+).(\d+).(\d+)$/){
next;
}
- if ($line =~ m/^\[netgroup\s+(\S+)\]\s*$/i) {
+ if ($line =~ m/^\[ipset\s+(\S+)\]\s*$/i) {
$section = 'ipset';
$group = lc($1);
next;