diff options
| author | John Estabrook <jestabro@vyos.io> | 2025-09-11 14:39:26 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-09-11 14:39:26 -0500 |
| commit | df52871a31c7658ccc6c465d4beb9c17cc09e8a5 (patch) | |
| tree | 9ff47e680a4d9357302fa6363d6775cbe40d6b06 /data | |
| parent | 859291467407c4ac33cf3aa9de73c11e6dda193f (diff) | |
| parent | b98a0d161f0c7dc773cf3bd53e00ae12810882d3 (diff) | |
| download | vyos-1x-df52871a31c7658ccc6c465d4beb9c17cc09e8a5.tar.gz vyos-1x-df52871a31c7658ccc6c465d4beb9c17cc09e8a5.zip | |
Merge pull request #4710 from ryanzuwala/ryanzuwala/T7700
conntrack: T7700: Prevent empty policy generation
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/conntrack/nftables-ct.j2 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/data/templates/conntrack/nftables-ct.j2 b/data/templates/conntrack/nftables-ct.j2 index 9169c1f55..0f0c49c76 100644 --- a/data/templates/conntrack/nftables-ct.j2 +++ b/data/templates/conntrack/nftables-ct.j2 @@ -30,7 +30,9 @@ table ip vyos_conntrack { l3proto ip; {% for protocol, protocol_config in rule_config.protocol.items() %} protocol {{ protocol }}; +{% if protocol_config | count > 0 %} policy = { {{ protocol_config | conntrack_ct_policy() }} } +{% endif %} {% endfor %} } {% endfor %} @@ -126,7 +128,9 @@ table ip6 vyos_conntrack { l3proto ip; {% for protocol, protocol_config in rule_config.protocol.items() %} protocol {{ protocol }}; +{% if protocol_config | count > 0 %} policy = { {{ protocol_config | conntrack_ct_policy() }} } +{% endif %} {% endfor %} } {% endfor %} |