PERFORCE change 112494 for review

Thu Jan 4 13:19:55 PST 2007

http://perforce.freebsd.org/chv.cgi?CH=112494

Change 112494 by piso at piso_newluxor on 2007/01/04 21:19:21

	In case IPFIREWALL_NAT was not definied, do not the user add 
	rules with a 'nat' action. 

Affected files ...

.. //depot/projects/soc2005/libalias/sys/netinet/ip_fw2.c#38 edit

Differences ...

==== //depot/projects/soc2005/libalias/sys/netinet/ip_fw2.c#38 (text+ko) ====

@@ -4222,9 +4222,13 @@
 			else
 				goto check_size;
 		case O_NAT:
+#ifdef IPFIREWALL_NAT
 			if (cmdlen != F_INSN_SIZE(ipfw_insn_nat))
  				goto bad_size;		
  			goto check_action;
+#else
+			return EINVAL;
+#endif
 		case O_FORWARD_MAC: /* XXX not implemented yet */
 		case O_CHECK_STATE:
 		case O_COUNT:
