From: Dietmar Maurer <dietmar@proxmox.com>
Date: Wed, 28 May 2014 08:41:50 +0000 (+0200)
Subject: fix ipset match - s/src/dst/
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=ac4580a02e7f8c0bbf9f77950771ace1c909ce5b

fix ipset match - s/src/dst/
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index c9b6e1f..1787637 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1370,7 +1370,7 @@ sub ruleset_generate_cmdstr {
 		my $name = $1;
 		if ($fw_conf && $fw_conf->{ipset}->{$name}) {
 		    my $ipset_chain = compute_ipset_chain_name($fw_conf->{vmid}, $name);
-		    push @cmd, "-m set --match-set ${ipset_chain} src";
+		    push @cmd, "-m set --match-set ${ipset_chain} dst";
 		} elsif ($cluster_conf && $cluster_conf->{ipset}->{$name}) {
 		    my $ipset_chain = compute_ipset_chain_name(0, $name);
 		    push @cmd, "-m set --match-set ${ipset_chain} dst";