this could be confusing, if someone adds code which uses $net->{ip}
it may work for the case were ipfilter is off but not else (which may
not get tested), so keep the original $net intact and copy the scalar
value..
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
push(@$arpfilter, $ip);
}
}
- if ($net->{ip} && $vmfw_conf->{options}->{ipfilter}) {
+ if (my $ip = $net->{ip} && $vmfw_conf->{options}->{ipfilter}) {
# ebtables changes this to a .0/MASK network but we just
# want the address here, no network - see #2193
- $net->{ip} =~ s|/(\d+)$||;
- push @$arpfilter, $net->{ip};
+ $ip =~ s|/(\d+)$||;
+ push @$arpfilter, $ip;
}
generate_tap_layer2filter($ruleset, $iface, $macaddr, $vmfw_conf, $vmid, $arpfilter);
}