summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
Diffstat (limited to 'data')
-rwxr-xr-xdata/templates/firewall/nftables.j28
1 files changed, 2 insertions, 6 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2
index 894232125..f810496f9 100755
--- a/data/templates/firewall/nftables.j2
+++ b/data/templates/firewall/nftables.j2
@@ -155,9 +155,7 @@ table ip vyos_filter {
{% if ipv4.output.filter.disable_conntrack is vyos_defined %}
chain VYOS_DISABLE_CONNTRACK_OUT {
type filter hook output priority -320; policy accept;
-{% if ipv4.output.filter.disable_conntrack is vyos_defined %}
- notrack counter comment "DISABLE-CT-OUT"
-{% endif %}
+ notrack counter comment "DISABLE-CT-OUT"
}
{% endif %}
@@ -344,9 +342,7 @@ table ip6 vyos_filter {
{% if ipv6.output.filter.disable_conntrack is vyos_defined %}
chain VYOS_DISABLE_CONNTRACK_OUT_V6 {
type filter hook output priority -320; policy accept;
-{% if ipv6.output.filter.disable_conntrack is vyos_defined %}
- notrack counter comment "DISABLE-CT-OUT-V6"
-{% endif %}
+ notrack counter comment "DISABLE-CT-OUT-V6"
}
{% endif %}