diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-02-22 14:15:26 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-02-22 14:15:26 +0100 |
| commit | 5d9d232fd93ad5bf89ba44a2d0ec3b196599fa74 (patch) | |
| tree | ca9a86e3aca88f990f3c139ee355d216b2925990 /data | |
| parent | b7ce1c1448f0f52976468fd579104f1e805fa8d8 (diff) | |
| parent | ac890f5e3ff7d0bb4853199204e4db7c4f1dcc3e (diff) | |
| download | vyos-1x-5d9d232fd93ad5bf89ba44a2d0ec3b196599fa74.tar.gz vyos-1x-5d9d232fd93ad5bf89ba44a2d0ec3b196599fa74.zip | |
Merge pull request #4357 from sarthurdev/T7148
firewall: T7148: Bridge state-policy uses drop in place of reject
Diffstat (limited to 'data')
| -rwxr-xr-x | data/templates/firewall/nftables.j2 | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index a35143870..67473da8e 100755 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -435,13 +435,13 @@ table bridge vyos_filter { {% if global_options.state_policy is vyos_defined %} chain VYOS_STATE_POLICY { {% if global_options.state_policy.established is vyos_defined %} - {{ global_options.state_policy.established | nft_state_policy('established') }} + {{ global_options.state_policy.established | nft_state_policy('established', bridge=True) }} {% endif %} {% if global_options.state_policy.invalid is vyos_defined %} - {{ global_options.state_policy.invalid | nft_state_policy('invalid') }} + {{ global_options.state_policy.invalid | nft_state_policy('invalid', bridge=True) }} {% endif %} {% if global_options.state_policy.related is vyos_defined %} - {{ global_options.state_policy.related | nft_state_policy('related') }} + {{ global_options.state_policy.related | nft_state_policy('related', bridge=True) }} {% endif %} return } |