From 879b77d07636ef10bb570effce022552d7c6cca3 Mon Sep 17 00:00:00 2001
From: JackDoan <me@jackdoan.com>
Date: Thu, 19 Feb 2026 15:57:02 -0600
Subject: [PATCH] oops

---
 firewall.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/firewall.go b/firewall.go
index a5f69570..685c0cee 100644
--- a/firewall.go
+++ b/firewall.go
@@ -510,8 +510,8 @@ func (f *Firewall) findUsableSNATPort(fp *firewall.Packet, c *conn) error {
 		}
 		//increment and retry. There's probably better strategies out there
 		fp.RemotePort++
-		if fp.RemotePort < 0x7ff {
-			fp.RemotePort += 0x7ff // keep it ephemeral for now
+		if fp.RemotePort < 0x7fff {
+			fp.RemotePort += 0x7fff // keep it ephemeral for now
 		}
 	}