From ce3d775b9063cf830d0dcb2067f30e511ff2be32 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Sat, 3 Jan 2026 14:34:09 +0100
Subject: [PATCH] Firewall: Rules [new] - add temporary validation to only
 support divert-to on IPv4 (as long as IPv6 doesn't work properly in pf)

---
 src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
index 58a56a314e..32e474e58a 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+++ b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
@@ -260,6 +260,12 @@ class Filter extends BaseModel
                                 $rule->{'divert-to'}->__reference
                             ));
                         }
+                        if (!$rule->{'divert-to'}->isEmpty() && $rule->ipprotocol != 'inet') {
+                            $messages->appendMessage(new Message(
+                                gettext("Divert-to is currently only supported for IPv4 rules."),
+                                $rule->{'divert-to'}->__reference
+                            ));
+                        }
                     }
                 }
             }