From 5c53cde45212f584ba3362f732508a5c2f169dc1 Mon Sep 17 00:00:00 2001 From: Dominik Csapak Date: Fri, 3 Jun 2016 15:14:24 +0200 Subject: [PATCH] fix allowed group name length the allowed length for an iptable chain is 28 chars we had a max set of 20 but a format of GROUP--IN and GROUP--OUT where is the group name but GROUP--OUT are 10 chars so we just allow 18 chars max Signed-off-by: Dominik Csapak --- debian/changelog | 4 ++++ src/PVE/Firewall.pm | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 451bb31..b672a62 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,10 @@ pve-firewall (2.0-28) unstable; urgency=medium * use pve-common's ipv4_mask_hash_localnet + * fix allowed group name length + + * make group digest stable + -- Proxmox Support Team Fri, 03 Jun 2016 11:01:47 +0200 pve-firewall (2.0-27) unstable; urgency=medium diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm index 1fa3e70..b52d324 100644 --- a/src/PVE/Firewall.pm +++ b/src/PVE/Firewall.pm @@ -50,7 +50,7 @@ our $ip_alias_pattern = '[A-Za-z][A-Za-z0-9\-\_]+'; my $max_alias_name_length = 64; my $max_ipset_name_length = 64; -my $max_group_name_length = 20; +my $max_group_name_length = 18; PVE::JSONSchema::register_format('IPorCIDR', \&pve_verify_ip_or_cidr); sub pve_verify_ip_or_cidr { -- 2.39.2