diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-10-21 08:04:15 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-10-21 08:04:15 +0200 |
| commit | 7d332b54762182154d640e06e342482efc3c7150 (patch) | |
| tree | 51b279265bbb6fbac8bdae06144de33d99b390c9 /data/templates/firewall/nftables.j2 | |
| parent | 025eb1fc477469e07234d2e957e379ab05b0ba62 (diff) | |
| parent | 9975ad209704ab9d0fda32324d0432f257c67668 (diff) | |
| download | vyos-1x-7d332b54762182154d640e06e342482efc3c7150.tar.gz vyos-1x-7d332b54762182154d640e06e342482efc3c7150.zip | |
Merge pull request #2388 from nicolas-fort/T5541-sagitta
T5541: firewall: re-add zone-based firewall.
Diffstat (limited to 'data/templates/firewall/nftables.j2')
| -rw-r--r-- | data/templates/firewall/nftables.j2 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index 0fbddfaa9..c2741a07f 100644 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -1,6 +1,7 @@ #!/usr/sbin/nft -f {% import 'firewall/nftables-defines.j2' as group_tmpl %} +{% import 'firewall/nftables-zone.j2' as zone_tmpl %} flush chain raw FW_CONNTRACK flush chain ip6 raw FW_CONNTRACK @@ -148,6 +149,10 @@ table ip vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, False) }} + +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, False) }} +{% endif %} } {% if first_install is not vyos_defined %} @@ -251,4 +256,9 @@ table ip6 vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, True) }} + +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, True) }} +{% endif %} + }
\ No newline at end of file |