From: Dietmar Maurer <dietmar@proxmox.com>
Date: Tue, 14 Oct 2014 14:28:44 +0000 (+0200)
Subject: fix max ipset name lenght
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=30150dca3cfc435c08d84022b9c4214b603a6522;ds=sidebyside

fix max ipset name lenght
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 727204a..2270ad7 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -760,7 +760,10 @@ sub local_network {
     return $__local_network;
 }
 
-my $max_iptables_ipset_name_length = 27;
+# ipset names are limited to 31 characters, and we use '_swap' 
+# suffix for atomic update, for example PVEFW-${VMID}-${ipset_name}_swap
+
+my $max_iptables_ipset_name_length = 31 - length("_swap");
 
 sub compute_ipset_chain_name {
     my ($vmid, $ipset_name) = @_;