From 980d0003258d0cc409f1a70bea0eaeb463618ae0 Mon Sep 17 00:00:00 2001
From: jon4hz <jonah.zuercher@adfinis.com>
Date: Thu, 13 Nov 2025 19:41:53 +0100
Subject: [PATCH] fix(portforwarding): handle deletion correctly

---
 lib/perl/OVH/Bastion/allowkeeper.inc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/lib/perl/OVH/Bastion/allowkeeper.inc b/lib/perl/OVH/Bastion/allowkeeper.inc
index db76bc7..654bd27 100644
--- a/lib/perl/OVH/Bastion/allowkeeper.inc
+++ b/lib/perl/OVH/Bastion/allowkeeper.inc
@@ -761,6 +761,14 @@ sub access_modify {
                             $shouldDelete = 0;
                         }
 
+                        # validate portforwarding if defined
+                        if ($shouldDelete && defined $remotePort) {
+                            $shouldDelete = 0 unless $line =~ m{\# REMOTEPORT=\Q$remotePort\E(\s|$)};
+                        }
+                        elsif ($shouldDelete && $line =~ m{\# REMOTEPORT=}) {
+                            $shouldDelete = 0;
+                        }
+
                         if ($shouldDelete) {
                             chomp $line;
                             $line = "# $line # $comment\n";