paulbsd/paulbsd-salt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

updated nftables rules template

Browse Source
This commit is contained in:
Paul 2021-08-19 21:37:10 +02:00
parent efabbbf8d1
commit 4ea7cee328
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
states/nftables/nftables.conf.j2
View File

@ -45,4 +45,6 @@ add rule ip6 filter6 input ip6 saddr {{ value.ip }}/{{ value.mask }} ct state es
{%- for key, value in net.public_ports.items() %} {%- for key, value in net.public_ports.items() %}
add rule ip6 filter6 input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept add rule ip6 filter6 input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept
{%- endfor %} {%- endfor %}
#add rule ip6 filter6 input counter log #add rule ip6 filter6 input counter log
## Endline is mandatory