From cccec5ab84c3d94b375247c537581fdaaa2c7b21 Mon Sep 17 00:00:00 2001 From: Ian Matyssik Date: Wed, 22 Feb 2017 10:37:10 +0900 Subject: [PATCH] remove filter_address_add_vips_subnets and references to it, since it is no loger needed with () and (:network) syntax --- src/etc/inc/filter.inc | 39 --------------------------------------- 1 file changed, 39 deletions(-) diff --git a/src/etc/inc/filter.inc b/src/etc/inc/filter.inc index 85ab46301..b0d3d6c70 100644 --- a/src/etc/inc/filter.inc +++ b/src/etc/inc/filter.inc @@ -2035,42 +2035,6 @@ function filter_generate_port(& $rule, $target = "source", $isnat = false) { return $src; } -function filter_address_add_vips_subnets(&$FilterIflist, &$subnets, $if, $not) -{ - $if_subnets = array($subnets); - - if ($not == true) { - $subnets = "!{$subnets}"; - } - - if (!empty($FilterIflist[$if]['vips']) || !empty($FilterIflist[$if]['vips6'])) { - $all_vips = array(); - $all_vips = array_merge($all_vips, !empty($FilterIflist[$if]['vips']) ? $FilterIflist[$if]['vips'] : array()); - $all_vips = array_merge($all_vips, !empty($FilterIflist[$if]['vips6']) ? $FilterIflist[$if]['vips6'] : array()); - foreach ($all_vips as $vip) { - foreach ($if_subnets as $subnet) { - if (ip_in_subnet($vip['ip'], $subnet)) { - continue 2; - } - } - $network = null; - if (is_ipaddrv4($vip['ip']) && is_subnetv4($if_subnets[0])) { - $network = gen_subnet($vip['ip'], $vip['sn']); - } elseif (is_ipaddrv6($vip['ip']) && is_subnetv6($if_subnets[0])) { - $network = gen_subnetv6($vip['ip'], $vip['sn']); - } - if (!empty($network)) { - $subnets .= ' ' . ($not == true ? '!' : '') . $network . '/' . $vip['sn']; - $if_subnets[] = $network . '/' . $vip['sn']; - } - } - - if (strpos($subnets, ' ') !== false) { - $subnets = "{ {$subnets} }"; - } - } -} - function filter_generate_address(&$FilterIflist, &$rule, $target = 'source', $isnat = false) { global $config; @@ -2117,9 +2081,6 @@ function filter_generate_address(&$FilterIflist, &$rule, $target = 'source', $is if (isset($rule[$target]['not'])) { $src = " !{$src}"; } - if (is_subnet($src)) { - filter_address_add_vips_subnets($FilterIflist, $src, $rule[$target]['network'], isset($rule[$target]['not'])); - } } elseif ($rule[$target]['address']) { $expsrc = alias_expand($rule[$target]['address']); if (isset($rule[$target]['not'])) {