local dest_port
local proto
local target
+ local ruleset
config_get src $1 src
config_get src_ip $1 src_ip
echo "dport may only be used it proto is defined"; return; }
$IPTABLES -A zone_${src}_prerouting -t nat \
${protocol:+-p $protocol} \
- ${src_ip:+-s $srcdip} \
+ ${src_ip:+-s $src_ip} \
${src_port:+--sport $src_port} \
${src_dport:+--dport $src_dport} \
${src_mac:+-m mac --mac-source $src_mac} \
$IPTABLES -I zone_${src}_forward 1 \
${protocol:+-p $protocol} \
-d $dest_ip \
- ${src_ip:+-s $srcdip} \
+ ${src_ip:+-s $src_ip} \
${src_port:+--sport $src_port} \
${dest_port:+--dport $dest_port} \
${src_mac:+-m mac --mac-source $src_mac} \