allow non zero ip address host bits to be entered

[pve-firewall.git] / src / PVE / API2 / Firewall / IPSet.pm

diff --git a/src/PVE/API2/Firewall/IPSet.pm b/src/PVE/API2/Firewall/IPSet.pm
index a5f69e9ac4042c51ff783fd3f1c5b264b8c33567..14bcfcb08e7456370dcfcd0df71b99c774f46be0 100644 (file)
--- a/src/PVE/API2/Firewall/IPSet.pm
+++ b/src/PVE/API2/Firewall/IPSet.pm
@@ -199,7 +199,7 @@ sub register_create_ip {
 
                my ($cluster_conf, $fw_conf, $ipset) = $class->load_config($param);
 
-               my $cidr = $param->{cidr};
+               my $cidr = PVE::Firewall::clean_cidr($param->{cidr});
                if ($cidr =~ m/^${PVE::Firewall::ip_alias_pattern}$/) {
                    # make sure alias exists (if $cidr is an alias)
                    PVE::Firewall::resolve_alias($cluster_conf, $fw_conf, $cidr);