diff --git a/states/nftables/nftables.conf.j2 b/states/nftables/nftables.conf.j2 index 5bacc4c..f461818 100644 --- a/states/nftables/nftables.conf.j2 +++ b/states/nftables/nftables.conf.j2 @@ -18,7 +18,7 @@ add rule ip filter input ip saddr {{ value.ip }}/{{ value.mask }} ct state estab {%- for key, value in net.public_ports.items() %} add rule ip filter input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept {%- endfor %} -add rule ip filter input counter log +#add rule ip filter input counter log ## IPv4 NAT add table ip nat @@ -45,4 +45,4 @@ add rule ip6 filter6 input ip6 saddr {{ value.ip }}/{{ value.mask }} ct state es {%- for key, value in net.public_ports.items() %} add rule ip6 filter6 input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept {%- endfor %} -add rule ip6 filter6 input counter log \ No newline at end of file +#add rule ip6 filter6 input counter log