diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-01-05 01:23:06 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-01-05 01:23:06 +0100 |
| commit | 7eadd337bed031334629cfb29a6b5f69f88efe32 (patch) | |
| tree | 77721249f1546d2a7face3913a76384bea5b6ab1 /data/templates/firewall/nftables.tmpl | |
| parent | f809139c04e5c18299a3b5929eb1c712a20a5535 (diff) | |
| parent | 459c7079bebe7059d90441a5014d948a92d2ee19 (diff) | |
| download | vyos-1x-7eadd337bed031334629cfb29a6b5f69f88efe32.tar.gz vyos-1x-7eadd337bed031334629cfb29a6b5f69f88efe32.zip | |
Merge pull request #1134 from sarthurdev/firewall
firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and zone-policy
Diffstat (limited to 'data/templates/firewall/nftables.tmpl')
| -rw-r--r-- | data/templates/firewall/nftables.tmpl | 10 |
1 files changed, 2 insertions, 8 deletions
diff --git a/data/templates/firewall/nftables.tmpl b/data/templates/firewall/nftables.tmpl index bbb111b1f..68e83de64 100644 --- a/data/templates/firewall/nftables.tmpl +++ b/data/templates/firewall/nftables.tmpl @@ -46,11 +46,8 @@ define P_{{ group_name }} = { table ip filter { {% if first_install is defined %} - chain VYOS_FW_IN { + chain VYOS_FW_FORWARD { type filter hook forward priority 0; policy accept; - } - chain VYOS_FW_OUT { - type filter hook forward priority 1; policy accept; jump VYOS_POST_FW } chain VYOS_FW_LOCAL { @@ -104,11 +101,8 @@ table ip filter { table ip6 filter { {% if first_install is defined %} - chain VYOS_FW6_IN { + chain VYOS_FW6_FORWARD { type filter hook forward priority 0; policy accept; - } - chain VYOS_FW6_OUT { - type filter hook forward priority 1; policy accept; jump VYOS_POST_FW6 } chain VYOS_FW6_LOCAL { |