use $security_group_name_pattern in iptables_get_chains

[pve-firewall.git] / src / PVE / Firewall.pm

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 3bb4d68b9c2290bc0f9c39191cbfdc6f78524d28..8976bad5f3a5d3234d399193be4f55b46a5c256c 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1518,7 +1518,7 @@ sub iptables_get_chains {
        return 1 if $name =~ m/^veth\d+i\d+-(?:IN|OUT)$/;
 
        return 1 if $name =~ m/^fwbr\d+(v\d+)?-(?:FW|IN|OUT|IPS)$/;
-       return 1 if $name =~ m/^GROUP-(?:[^\s\-]+)-(?:IN|OUT)$/;
+       return 1 if $name =~ m/^GROUP-(?:$security_group_name_pattern)-(?:IN|OUT)$/;
 
        return undef;
     };