diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-28 20:35:32 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-28 20:35:32 +0100 |
| commit | fc96c0150eb632e016d7f2ba8adf32a9940c1e8c (patch) | |
| tree | e41c55228643fac1694d87d24183381d45ef4f38 /data | |
| parent | e1644d96a613d02db8cc21ccac6226b53568c5b0 (diff) | |
| parent | 6f7d1e15665655e37e8ca830e28d9650445c1217 (diff) | |
| download | vyos-1x-fc96c0150eb632e016d7f2ba8adf32a9940c1e8c.tar.gz vyos-1x-fc96c0150eb632e016d7f2ba8adf32a9940c1e8c.zip | |
Merge pull request #3055 from sarthurdev/T6073
vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required
Diffstat (limited to 'data')
| -rw-r--r-- | data/config-mode-dependencies/vyos-1x.json | 3 | ||||
| -rw-r--r-- | data/vyos-firewall-init.conf | 2 |
2 files changed, 2 insertions, 3 deletions
diff --git a/data/config-mode-dependencies/vyos-1x.json b/data/config-mode-dependencies/vyos-1x.json index b0586e0bb..6ab36005b 100644 --- a/data/config-mode-dependencies/vyos-1x.json +++ b/data/config-mode-dependencies/vyos-1x.json @@ -1,6 +1,7 @@ { "system_conntrack": { - "conntrack_sync": ["service_conntrack-sync"] + "conntrack_sync": ["service_conntrack-sync"], + "vrf": ["vrf"] }, "firewall": { "conntrack": ["system_conntrack"], diff --git a/data/vyos-firewall-init.conf b/data/vyos-firewall-init.conf index 5a4e03015..3929edf0b 100644 --- a/data/vyos-firewall-init.conf +++ b/data/vyos-firewall-init.conf @@ -65,11 +65,9 @@ table inet vrf_zones { # Chain for inbound traffic chain vrf_zones_ct_in { type filter hook prerouting priority raw; policy accept; - counter ct original zone set iifname map @ct_iface_map } # Chain for locally-generated traffic chain vrf_zones_ct_out { type filter hook output priority raw; policy accept; - counter ct original zone set oifname map @ct_iface_map } } |