diff --git a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php index bdd86f2a7..788975f9b 100644 --- a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php +++ b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php @@ -108,9 +108,11 @@ class Filter extends BaseModel } } - if (!empty((string)$rule->interfacenot) && ( + if ( + !empty((string)$rule->interfacenot) && ( count(explode(',', $rule->interface)) != 1 || empty((string)$rule->interface) - )) { + ) + ) { $messages->appendMessage(new Message( gettext("Inverting interfaces is only allowed for single targets to avoid mis-interpretations"), $rule->interfacenot->__reference