fix ipset match - s/src/dst/

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index c9b6e1f4ce578878a7036729eacdd1ed80f713ef..1787637fe5d438f800c6cad6c7c2af87d77b8aad 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1370,7 +1370,7 @@ sub ruleset_generate_cmdstr {
                my $name = $1;
                if ($fw_conf && $fw_conf->{ipset}->{$name}) {
                    my $ipset_chain = compute_ipset_chain_name($fw_conf->{vmid}, $name);
-                   push @cmd, "-m set --match-set ${ipset_chain} src";
+                   push @cmd, "-m set --match-set ${ipset_chain} dst";
                } elsif ($cluster_conf && $cluster_conf->{ipset}->{$name}) {
                    my $ipset_chain = compute_ipset_chain_name(0, $name);
                    push @cmd, "-m set --match-set ${ipset_chain} dst";