diff options
author | Daniil Baturin <daniil@vyos.io> | 2025-04-22 16:21:51 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2025-04-22 16:21:51 +0100 |
commit | 801bdc92ca8e55a001f5b7883c4770372643a1f3 (patch) | |
tree | 5fd154ad744e9cdd7b34d3f44f168d92dcf4ea99 /data/templates/firewall/nftables-policy.j2 | |
parent | d93a44867eb6924dc633405126893ae542855167 (diff) | |
parent | 8f20f0ef786318c5a6f43b8f3aa9133de98a8054 (diff) | |
download | veeos-1x-current.tar.gz veeos-1x-current.zip |
geoip: T5636: Add geoip for policy route/route6
Diffstat (limited to 'data/templates/firewall/nftables-policy.j2')
-rw-r--r-- | data/templates/firewall/nftables-policy.j2 | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables-policy.j2 b/data/templates/firewall/nftables-policy.j2 index 9e28899b0..00d0e8a62 100644 --- a/data/templates/firewall/nftables-policy.j2 +++ b/data/templates/firewall/nftables-policy.j2 @@ -33,6 +33,15 @@ table ip vyos_mangle { {% endif %} } {% endfor %} + +{% if geoip_updated.name is vyos_defined %} +{% for setname in geoip_updated.name %} + set {{ setname }} { + type ipv4_addr + flags interval + } +{% endfor %} +{% endif %} {% endif %} {{ group_tmpl.groups(firewall_group, False, True) }} @@ -65,6 +74,14 @@ table ip6 vyos_mangle { {% endif %} } {% endfor %} +{% if geoip_updated.ipv6_name is vyos_defined %} +{% for setname in geoip_updated.ipv6_name %} + set {{ setname }} { + type ipv6_addr + flags interval + } +{% endfor %} +{% endif %} {% endif %} {{ group_tmpl.groups(firewall_group, True, True) }} |