diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-10-19 20:06:52 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-10-19 20:06:52 +0200 |
| commit | 0dcddbd4594fa957a331c9e5ef752b035513bc12 (patch) | |
| tree | 787585a6e5ea18c1ef1dba96f7ec093742ae9bf4 /data/templates/firewall/nftables.j2 | |
| parent | c2edbc6c414024b46f5908cf646d64600eb6270f (diff) | |
| parent | c82fe6540c0c0c499434c3ccbb4228b30b24e924 (diff) | |
| download | vyos-1x-0dcddbd4594fa957a331c9e5ef752b035513bc12.tar.gz vyos-1x-0dcddbd4594fa957a331c9e5ef752b035513bc12.zip | |
Merge pull request #2362 from nicolas-fort/T5541
T5541: firewall zone: re add firewall zone-base firewall
Diffstat (limited to 'data/templates/firewall/nftables.j2')
| -rw-r--r-- | data/templates/firewall/nftables.j2 | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index 1b46fb5d4..e24a9655d 100644 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -3,6 +3,7 @@ {% import 'firewall/nftables-defines.j2' as group_tmpl %} {% import 'firewall/nftables-bridge.j2' as bridge_tmpl %} {% import 'firewall/nftables-offload.j2' as offload_tmpl %} +{% import 'firewall/nftables-zone.j2' as zone_tmpl %} flush chain raw vyos_global_rpfilter flush chain ip6 raw vyos_global_rpfilter @@ -151,6 +152,10 @@ table ip vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, False, True) }} + +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, False) }} +{% endif %} } {% if first_install is not vyos_defined %} @@ -260,6 +265,9 @@ table ip6 vyos_filter { {% endif %} {% endif %} {{ group_tmpl.groups(group, True, True) }} +{% if zone is vyos_defined %} +{{ zone_tmpl.zone_chains(zone, True) }} +{% endif %} } ## Bridge Firewall @@ -269,4 +277,5 @@ delete table bridge vyos_filter table bridge vyos_filter { {{ bridge_tmpl.bridge(bridge) }} {{ group_tmpl.groups(group, False, False) }} + } |