diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-02-20 19:33:16 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-02-20 19:33:16 +0100 |
| commit | ac890f5e3ff7d0bb4853199204e4db7c4f1dcc3e (patch) | |
| tree | 68ccbbfb117d41382ba7c8a3dfa3bf88165255ec /data | |
| parent | 4d9d45a45acaa506b9cc99dbb86e12b9cb692dd1 (diff) | |
| download | vyos-1x-ac890f5e3ff7d0bb4853199204e4db7c4f1dcc3e.tar.gz vyos-1x-ac890f5e3ff7d0bb4853199204e4db7c4f1dcc3e.zip | |
firewall: T7148: Bridge state-policy uses drop in place of reject
Diffstat (limited to 'data')
| -rwxr-xr-x | data/templates/firewall/nftables.j2 | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index a35143870..67473da8e 100755 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -435,13 +435,13 @@ table bridge vyos_filter { {% if global_options.state_policy is vyos_defined %} chain VYOS_STATE_POLICY { {% if global_options.state_policy.established is vyos_defined %} - {{ global_options.state_policy.established | nft_state_policy('established') }} + {{ global_options.state_policy.established | nft_state_policy('established', bridge=True) }} {% endif %} {% if global_options.state_policy.invalid is vyos_defined %} - {{ global_options.state_policy.invalid | nft_state_policy('invalid') }} + {{ global_options.state_policy.invalid | nft_state_policy('invalid', bridge=True) }} {% endif %} {% if global_options.state_policy.related is vyos_defined %} - {{ global_options.state_policy.related | nft_state_policy('related') }} + {{ global_options.state_policy.related | nft_state_policy('related', bridge=True) }} {% endif %} return } |