Ensure that network/prefix is valid

diff --git a/firewall/save_rule.cgi b/firewall/save_rule.cgi
index 7e360b5..79026fe 100755 (executable)
--- a/firewall/save_rule.cgi
+++ b/firewall/save_rule.cgi
@@ -371,6 +371,6 @@ sub check_ipmask
 return &check_ipaddress($_[0]) || gethostbyname($_[0]) ||
        $_[0] =~ /^([0-9\.]+)\/([0-9\.]+)$/ &&
                (&check_ipaddress("$1") || gethostbyname("$1")) &&
-               (&check_ipaddress("$2") || $2 =~ /^\d+$/);
+               (&check_ipaddress("$2") || ($2 =~ /^\d+$/ && $2 <= 32));
 }