firewall: no VIPs for outbound NAT

PR: https://forum.opnsense.org/index.php?topic=7438.0
opnsense · Mar 7, 2018 · 7a823c5 · 7a823c5
1 parent ec819ca
commit 7a823c5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/opnsense/mvc/app/library/OPNsense/Firewall/SNatRule.php b/src/opnsense/mvc/app/library/OPNsense/Firewall/SNatRule.php
@@ -79,11 +79,11 @@ private function parseNatRules()
                     ) {
                         // When pool options are set, we may not specify our interface as a list
                         // (which doesn't require the same network validations as single items do).
-                        $rule['target'] = "{$interf_settings['if']}";
+                        $rule['target'] = "{$interf_settings['if']}:0";
                     } elseif (!empty($interf_settings['if'])) {
                         // Define target as list, to prevent "no IP address found for *Interface*" when pf can't
                         // find an address on the interface for the same protocol family.
-                        $rule['target'] = "({$interf_settings['if']})";
+                        $rule['target'] = "({$interf_settings['if']}:0)";
                     }
                 }
                 if (empty($rule['target'])) {