From 912c625e9e71ec186d7c8ee6179e34a2ee00dfd7 Mon Sep 17 00:00:00 2001 From: Michael Rash Date: Sun, 12 Apr 2015 15:55:20 -0700 Subject: [PATCH] [server] remove DISABLE_DNAT exception for SPA packets that request a NAT operation - this is reserved for FORCE_NAT scenarios --- server/fw_util_firewalld.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/fw_util_firewalld.c b/server/fw_util_firewalld.c index 60a9472d..12fe3273 100644 --- a/server/fw_util_firewalld.c +++ b/server/fw_util_firewalld.c @@ -1339,7 +1339,7 @@ process_spa_request(const fko_srv_options_t * const opts, /* DNAT rule */ - if(strlen(dnat_chain->to_chain) && !acc->disable_dnat) + if(strlen(dnat_chain->to_chain)) dnat_rule(opts, acc, dnat_chain, nat_ip, nat_port, fst_proto, fst_port, spadat, exp_ts, now);