From b2e4f83c8fb011ffe0a8b040fa937f60c842cc25 Mon Sep 17 00:00:00 2001

From: Eric Garver <eric@garver.life>

Date: Thu, 2 Apr 2020 14:42:22 -0400

Subject: [PATCH 3/6] fix: nftables: ipset: port ranges for non-default

 protocols

Fixes: 2d1b0fe9fe74 ("fix: nftables: allow set intervals with concatenations")

(cherry picked from commit e80f4fccfc771128affdc578ed37842d5d469ca9)

(cherry picked from commit 6a2fd018666ab8c4877291f8f807a9943db74de3)

---

 src/firewall/core/nftables.py | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/firewall/core/nftables.py b/src/firewall/core/nftables.py

index a9d5a45337bd..69ee63b32f8b 100644

--- a/src/firewall/core/nftables.py

+++ b/src/firewall/core/nftables.py

@@ -1680,7 +1680,7 @@ class nftables(object):

                     port_str = entry_tokens[i][index+1:]

                 try:

-                    index = entry_tokens[i].index("-")

+                    index = port_str.index("-")

                 except ValueError:

                     fragment.append(port_str)

                 else:

-- 

2.23.0