consider host-IN/OUT chains in iptables_get_chains

[pve-firewall.git] / PVE / Firewall.pm

diff --git a/PVE/Firewall.pm b/PVE/Firewall.pm
index 50fd20e9dda5597d1561b32d0ba1eeb95877351d..68a8cbb4984deb1338785b5a8f97134a00720daa 100644 (file)
--- a/PVE/Firewall.pm
+++ b/PVE/Firewall.pm
@@ -184,6 +184,7 @@ sub iptables_get_chains {
        return 1 if $name =~ m/^tap\d+i\d+-(:?IN|OUT)$/;
        return 1 if $name =~ m/^vmbr\d+-(:?IN|OUT)$/;
        return 1 if $name =~ m/^GROUP-(:?[^\s\-]+)-(:?IN|OUT)$/;
        return 1 if $name =~ m/^tap\d+i\d+-(:?IN|OUT)$/;
        return 1 if $name =~ m/^vmbr\d+-(:?IN|OUT)$/;
        return 1 if $name =~ m/^GROUP-(:?[^\s\-]+)-(:?IN|OUT)$/;

+       return 1 if $name =~ m/^host-(:?IN|OUT)$/;

 
        return undef;
     };
 
        return undef;
     };