From e14461a58ba0dd18dff7f9e80da03350ebf1b404 Mon Sep 17 00:00:00 2001 From: David Vølker Date: Mon, 30 Jun 2025 08:28:40 +0200 Subject: firewall: T7452: update rule generation for Zone-based firewall --- data/templates/firewall/nftables-zone.j2 | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) (limited to 'data') diff --git a/data/templates/firewall/nftables-zone.j2 b/data/templates/firewall/nftables-zone.j2 index 66f7e0b1c..5a2b8912e 100644 --- a/data/templates/firewall/nftables-zone.j2 +++ b/data/templates/firewall/nftables-zone.j2 @@ -12,9 +12,7 @@ oifname { {{ zone_conf.member.interface | quoted_join(',') }} } counter jump VZONE_{{ zone_name }} {% endif %} {% if 'vrf' in zone_conf.member %} -{% for vrf_name in zone_conf.member.vrf %} - oifname { "{{ zone_conf['vrf_interfaces'][vrf_name] }}" } counter jump VZONE_{{ zone_name }} -{% endfor %} + oifname { {{ zone_conf.member.vrf | quoted_join(",") }} } counter jump VZONE_{{ zone_name }} {% endif %} {% endif %} {% endfor %} @@ -69,10 +67,8 @@ oifname { {{ zone[from_zone].member.interface | quoted_join(",") }} } counter return {% endif %} {% if 'vrf' in zone[from_zone].member %} -{% for vrf_name in zone[from_zone].member.vrf %} - oifname { "{{ zone[from_zone]['vrf_interfaces'][vrf_name] }}" } counter jump NAME{{ suffix }}_{{ from_conf.firewall[fw_name] }} - oifname { "{{ zone[from_zone]['vrf_interfaces'][vrf_name] }}" } counter return -{% endfor %} + oifname { {{ zone[from_zone].member.vrf | quoted_join(",") }} } counter jump NAME{{ suffix }}_{{ from_conf.firewall[fw_name] }} + oifname { {{ zone[from_zone].member.vrf | quoted_join(",") }} } counter return {% endif %} {% endfor %} {% endif %} @@ -112,4 +108,4 @@ } {% endif %} {% endfor %} -{% endmacro %} \ No newline at end of file +{% endmacro %} -- cgit v1.2.3