diff options
Diffstat (limited to 'data/templates/firewall/nftables-policy.tmpl')
-rw-r--r-- | data/templates/firewall/nftables-policy.tmpl | 55 |
1 files changed, 0 insertions, 55 deletions
diff --git a/data/templates/firewall/nftables-policy.tmpl b/data/templates/firewall/nftables-policy.tmpl deleted file mode 100644 index d1b0fa56e..000000000 --- a/data/templates/firewall/nftables-policy.tmpl +++ /dev/null @@ -1,55 +0,0 @@ -#!/usr/sbin/nft -f - -{% if cleanup_commands is vyos_defined %} -{% for command in cleanup_commands %} -{{ command }} -{% endfor %} -{% endif %} - -include "/run/nftables_defines.conf" - -table ip mangle { -{% if first_install is vyos_defined %} - chain VYOS_PBR_PREROUTING { - type filter hook prerouting priority -150; policy accept; - } - chain VYOS_PBR_POSTROUTING { - type filter hook postrouting priority -150; policy accept; - } -{% endif %} -{% if route is vyos_defined %} -{% for route_text, conf in route.items() %} - chain VYOS_PBR_{{ route_text }} { -{% if conf.rule is vyos_defined %} -{% for rule_id, rule_conf in conf.rule.items() if rule_conf.disable is not vyos_defined %} - {{ rule_conf | nft_rule(route_text, rule_id, 'ip') }} -{% endfor %} -{% endif %} - {{ conf | nft_default_rule(route_text) }} - } -{% endfor %} -{%- endif %} -} - -table ip6 mangle { -{% if first_install is vyos_defined %} - chain VYOS_PBR6_PREROUTING { - type filter hook prerouting priority -150; policy accept; - } - chain VYOS_PBR6_POSTROUTING { - type filter hook postrouting priority -150; policy accept; - } -{% endif %} -{% if route6 is vyos_defined %} -{% for route_text, conf in route6.items() %} - chain VYOS_PBR6_{{ route_text }} { -{% if conf.rule is vyos_defined %} -{% for rule_id, rule_conf in conf.rule.items() if rule_conf.disable is not vyos_defined %} - {{ rule_conf | nft_rule(route_text, rule_id, 'ip6') }} -{% endfor %} -{% endif %} - {{ conf | nft_default_rule(route_text) }} - } -{% endfor %} -{% endif %} -} |