allow GROUP rule without iface

[pve-firewall.git] / src / PVE / Firewall.pm

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 56c3beb807357fd229acda7569faaea534406636..ef54621a5d3a9455bb0bc60a3001b36dc46a9837 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1784,7 +1784,7 @@ sub parse_fw_rule {
            die "unknown action '$action'\n";
        }
     } elsif ($type eq 'group') {
-       die "wrong number of rule elements\n" if scalar(@data) != 3;
+       die "wrong number of rule elements\n" if scalar(@data) > 3;
        die "groups disabled\n" if !$allow_groups;
 
        die "invalid characters in group name\n" if $action !~ m/^${security_group_name_pattern}$/;