From 992c847493665fd2119636d81582aa80e99e388a Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Sun, 1 May 2022 19:21:35 +0200 Subject: vrf: T4353: fix Jinja2 linting errors --- data/templates/firewall/nftables-vrf-zones.j2 | 17 +++++++++++++++++ data/templates/firewall/nftables-vrf-zones.tmpl | 17 ----------------- 2 files changed, 17 insertions(+), 17 deletions(-) create mode 100644 data/templates/firewall/nftables-vrf-zones.j2 delete mode 100644 data/templates/firewall/nftables-vrf-zones.tmpl (limited to 'data/templates/firewall') diff --git a/data/templates/firewall/nftables-vrf-zones.j2 b/data/templates/firewall/nftables-vrf-zones.j2 new file mode 100644 index 000000000..eecf47b78 --- /dev/null +++ b/data/templates/firewall/nftables-vrf-zones.j2 @@ -0,0 +1,17 @@ +table inet vrf_zones { + # Map of interfaces and connections tracking zones + map ct_iface_map { + typeof iifname : ct zone + } + # Assign unique zones for each VRF + # Chain for inbound traffic + chain vrf_zones_ct_in { + type filter hook prerouting priority raw; policy accept; + counter ct zone set iifname map @ct_iface_map + } + # Chain for locally-generated traffic + chain vrf_zones_ct_out { + type filter hook output priority raw; policy accept; + counter ct zone set oifname map @ct_iface_map + } +} diff --git a/data/templates/firewall/nftables-vrf-zones.tmpl b/data/templates/firewall/nftables-vrf-zones.tmpl deleted file mode 100644 index eecf47b78..000000000 --- a/data/templates/firewall/nftables-vrf-zones.tmpl +++ /dev/null @@ -1,17 +0,0 @@ -table inet vrf_zones { - # Map of interfaces and connections tracking zones - map ct_iface_map { - typeof iifname : ct zone - } - # Assign unique zones for each VRF - # Chain for inbound traffic - chain vrf_zones_ct_in { - type filter hook prerouting priority raw; policy accept; - counter ct zone set iifname map @ct_iface_map - } - # Chain for locally-generated traffic - chain vrf_zones_ct_out { - type filter hook output priority raw; policy accept; - counter ct zone set oifname map @ct_iface_map - } -} -- cgit v1.2.3