firewall: don't setup nat reflection if negations are used

SVN-Revision: 23142
2010-09-28 11:11:11 +00:00 · 2010-09-28 11:11:11 +00:00 · a1a31f1831
parent 6a335579b8
commit a1a31f1831
1 changed files with 3 additions and 0 deletions
--- a/package/firewall/files/reflection.hotplug
+++ b/package/firewall/files/reflection.hotplug
@ -82,6 +82,9 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then

 				[ "$proto" = tcpudp ] && proto="tcp udp"

+				[ "${inthost#!}" = "$inthost" ] || return 0
+				[ "${exthost#!}" = "$exthost" ] || return 0
+
 				local p
 				for p in ${proto:-tcp udp}; do
 					case "$p" in