data/templates/firewall/nftables-static-nat.j2


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

#!/usr/sbin/nft -f

{% if first_install is not vyos_defined %}
delete table ip vyos_static_nat
{% endif %}
table ip vyos_static_nat {
    #
    # Destination NAT rules build up here
    #

    chain PREROUTING {
        type nat hook prerouting priority -100; policy accept;
{% if static.rule is vyos_defined %}
{%     for rule, config in static.rule.items() if config.disable is not vyos_defined %}
    {{ config | nat_static_rule(rule, 'destination') }}
{%     endfor %}
{% endif %}
    }

    #
    # Source NAT rules build up here
    #
    chain POSTROUTING {
        type nat hook postrouting priority 100; policy accept;
{% if static.rule is vyos_defined %}
{%     for rule, config in static.rule.items() if config.disable is not vyos_defined %}
    {{ config | nat_static_rule(rule, 'source') }}
{%     endfor %}
{% endif %}
    }
}