use parse_address_list to validate IP list

[pve-firewall.git] / src / PVE / Firewall.pm

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 1586390c90de75efdc1a6261c6d6793f65b0e5d0..ff50d048af9bfe220d08de4589ba5c2ba5c00fc1 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -954,7 +954,7 @@ sub ruleset_generate_vm_rules {
 sub generate_venet_rules_direction {
     my ($ruleset, $groups_conf, $vmfw_conf, $vmid, $ip, $direction) = @_;
 
-    # fixme: $ip is a list of CIDRs?
+    parse_address_list($ip); # make sure we have a valid $ip list
 
     my $lc_direction = lc($direction);