fix ipset match - s/src/dst/
authorDietmar Maurer <dietmar@proxmox.com>
Wed, 28 May 2014 08:41:50 +0000 (10:41 +0200)
committerDietmar Maurer <dietmar@proxmox.com>
Wed, 28 May 2014 08:41:50 +0000 (10:41 +0200)
src/PVE/Firewall.pm

index c9b6e1f..1787637 100644 (file)
@@ -1370,7 +1370,7 @@ sub ruleset_generate_cmdstr {
                my $name = $1;
                if ($fw_conf && $fw_conf->{ipset}->{$name}) {
                    my $ipset_chain = compute_ipset_chain_name($fw_conf->{vmid}, $name);
-                   push @cmd, "-m set --match-set ${ipset_chain} src";
+                   push @cmd, "-m set --match-set ${ipset_chain} dst";
                } elsif ($cluster_conf && $cluster_conf->{ipset}->{$name}) {
                    my $ipset_chain = compute_ipset_chain_name(0, $name);
                    push @cmd, "-m set --match-set ${ipset_chain} dst";