Fix NPt validation to allow single addresses. Fixes #9163

pfsense · Dec 4, 2018 · e9446f5 · e9446f5
1 parent b6acaf7
commit e9446f5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/etc/inc/filter.inc b/src/etc/inc/filter.inc
@@ -2049,7 +2049,8 @@ function filter_nat_rules_generate() {
 
 			/* Do not form an invalid NPt rule.
 			 * See https://redmine.pfsense.org/issues/8575 */
-			if (!is_subnetv6($srcaddr) || !is_subnetv6($dstaddr)) {
+			if (!(is_subnetv6($srcaddr) || is_ipaddrv6($srcaddr)) ||
+			    !(is_subnetv6($dstaddr) || is_ipaddrv6($dstaddr))) {
 				continue;
 			}