def port_to_rule(ty, rules):
if ty == "port" :
ast = parse_ast(rules, parse_numbers_expr, True)
- return "if (!ports_valid) break;\nif (!( " + ast.write("sport", "dport") + " )) break;"
+ return "if (sport == -1 || dport == -1) break;\nif (!( " + ast.write("sport", "dport") + " )) break;"
ast = parse_ast(rules, parse_numbers_expr, True)
- return "if (!ports_valid) break;\nif (!( " + ast.write(ty) + " )) break;"
+ return "if (" + ty + " == -1) break;\nif (!( " + ast.write(ty) + " )) break;"
def tcp_flags_to_rule(rules):
ast = parse_ast(rules, parse_bit_expr, False)