diff options
| author | Ryan Zuwala <ryanzuwala@gmail.com> | 2025-09-10 12:24:26 -0400 |
|---|---|---|
| committer | Ryan Zuwala <ryanzuwala@gmail.com> | 2025-09-10 13:31:59 -0400 |
| commit | b98a0d161f0c7dc773cf3bd53e00ae12810882d3 (patch) | |
| tree | 3f685f17d525f8b3ffc0417eb0ae4fdaf2e6e186 /data | |
| parent | d11434953bb62c52405f28771e7325b68db15684 (diff) | |
| download | vyos-1x-b98a0d161f0c7dc773cf3bd53e00ae12810882d3.tar.gz vyos-1x-b98a0d161f0c7dc773cf3bd53e00ae12810882d3.zip | |
conntrack: T7700: Prevent empty policy generation
Only print policy in nftables-ct.conf if protocol config is defined
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/conntrack/nftables-ct.j2 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/data/templates/conntrack/nftables-ct.j2 b/data/templates/conntrack/nftables-ct.j2 index 9169c1f55..0f0c49c76 100644 --- a/data/templates/conntrack/nftables-ct.j2 +++ b/data/templates/conntrack/nftables-ct.j2 @@ -30,7 +30,9 @@ table ip vyos_conntrack { l3proto ip; {% for protocol, protocol_config in rule_config.protocol.items() %} protocol {{ protocol }}; +{% if protocol_config | count > 0 %} policy = { {{ protocol_config | conntrack_ct_policy() }} } +{% endif %} {% endfor %} } {% endfor %} @@ -126,7 +128,9 @@ table ip6 vyos_conntrack { l3proto ip; {% for protocol, protocol_config in rule_config.protocol.items() %} protocol {{ protocol }}; +{% if protocol_config | count > 0 %} policy = { {{ protocol_config | conntrack_ct_policy() }} } +{% endif %} {% endfor %} } {% endfor %} |