From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 15 May 2014 05:15:58 +0000 (+0200)
Subject: allow GROUP rule without iface
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=0362a1adeee64bc70719b4f3d99805b09e8cd63d;ds=sidebyside

allow GROUP rule without iface
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 56c3beb..ef54621 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1784,7 +1784,7 @@ sub parse_fw_rule {
 	    die "unknown action '$action'\n";
 	}
     } elsif ($type eq 'group') {
-	die "wrong number of rule elements\n" if scalar(@data) != 3;
+	die "wrong number of rule elements\n" if scalar(@data) > 3;
 	die "groups disabled\n" if !$allow_groups;
 
 	die "invalid characters in group name\n" if $action !~ m/^${security_group_name_pattern}$/;