diff options
| author | Nicolas Fort <nicolasfort1988@gmail.com> | 2023-10-20 20:02:36 +0000 |
|---|---|---|
| committer | Nicolas Fort <nicolasfort1988@gmail.com> | 2023-10-20 20:02:36 +0000 |
| commit | 9975ad209704ab9d0fda32324d0432f257c67668 (patch) | |
| tree | e864386d1a59d5178ab5dd32b43e7a2155260008 /data/templates/firewall/nftables.j2 | |
| parent | 999c99a19bd72c4c6220530752bcffed8bd4cbad (diff) | |
| download | vyos-1x-9975ad209704ab9d0fda32324d0432f257c67668.tar.gz vyos-1x-9975ad209704ab9d0fda32324d0432f257c67668.zip | |
T5541: firewall: re-add zone-based firewall.
Diffstat (limited to 'data/templates/firewall/nftables.j2')
| -rw-r--r-- | data/templates/firewall/nftables.j2 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index 0fbddfaa9..c2741a07f 100644 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -1,6 +1,7 @@ #!/usr/sbin/nft -f {% import 'firewall/nftables-defines.j2' as group_tmpl %} +{% import 'firewall/nftables-zone.j2' as zone_tmpl %} flush chain raw FW_CONNTRACK flush chain ip6 raw FW_CONNTRACK @@ -148,6 +149,10 @@ table ip vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, False) }} + +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, False) }} +{% endif %} } {% if first_install is not vyos_defined %} @@ -251,4 +256,9 @@ table ip6 vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, True) }} + +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, True) }} +{% endif %} + }
\ No newline at end of file |