summaryrefslogtreecommitdiff
path: root/data/templates/firewall/nftables-policy.j2
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2025-04-22 16:21:51 +0100
committerGitHub <noreply@github.com>2025-04-22 16:21:51 +0100
commit801bdc92ca8e55a001f5b7883c4770372643a1f3 (patch)
tree5fd154ad744e9cdd7b34d3f44f168d92dcf4ea99 /data/templates/firewall/nftables-policy.j2
parentd93a44867eb6924dc633405126893ae542855167 (diff)
parent8f20f0ef786318c5a6f43b8f3aa9133de98a8054 (diff)
downloadveeos-1x-current.tar.gz
veeos-1x-current.zip
Merge pull request #4419 from sskaje/T5636HEADcurrent
geoip: T5636: Add geoip for policy route/route6
Diffstat (limited to 'data/templates/firewall/nftables-policy.j2')
-rw-r--r--data/templates/firewall/nftables-policy.j217
1 files changed, 17 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables-policy.j2 b/data/templates/firewall/nftables-policy.j2
index 9e28899b0..00d0e8a62 100644
--- a/data/templates/firewall/nftables-policy.j2
+++ b/data/templates/firewall/nftables-policy.j2
@@ -33,6 +33,15 @@ table ip vyos_mangle {
{% endif %}
}
{% endfor %}
+
+{% if geoip_updated.name is vyos_defined %}
+{% for setname in geoip_updated.name %}
+ set {{ setname }} {
+ type ipv4_addr
+ flags interval
+ }
+{% endfor %}
+{% endif %}
{% endif %}
{{ group_tmpl.groups(firewall_group, False, True) }}
@@ -65,6 +74,14 @@ table ip6 vyos_mangle {
{% endif %}
}
{% endfor %}
+{% if geoip_updated.ipv6_name is vyos_defined %}
+{% for setname in geoip_updated.ipv6_name %}
+ set {{ setname }} {
+ type ipv6_addr
+ flags interval
+ }
+{% endfor %}
+{% endif %}
{% endif %}
{{ group_tmpl.groups(firewall_group, True, True) }}