From 5c4c873f9c36459bc7bad73208450ee802440929 Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Fri, 12 Jan 2024 13:52:26 +0000 Subject: T5922: firewall: fix intra-zone filtering parsing rules; update firewall smoketest --- data/templates/firewall/nftables-zone.j2 | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) (limited to 'data/templates/firewall/nftables-zone.j2') diff --git a/data/templates/firewall/nftables-zone.j2 b/data/templates/firewall/nftables-zone.j2 index 5e55099ca..e78725079 100644 --- a/data/templates/firewall/nftables-zone.j2 +++ b/data/templates/firewall/nftables-zone.j2 @@ -1,13 +1,6 @@ - -{% macro zone_chains(zone, family, state_policy=False) %} -{% if family == 'ipv6' %} -{% set fw_name = 'ipv6_name' %} -{% set suffix = '6' %} -{% else %} -{% set fw_name = 'name' %} -{% set suffix = '' %} -{% endif %} - +{% macro zone_chains(zone, ipv6=False, state_policy=False) %} +{% set fw_name = 'ipv6_name' if ipv6 else 'name' %} +{% set suffix = '6' if ipv6 else '' %} chain VYOS_ZONE_FORWARD { type filter hook forward priority 1; policy accept; {% if state_policy %} -- cgit v1.2.3