From 7a38311aa96ab01452e3d6a7cba79648575c550c Mon Sep 17 00:00:00 2001 From: Paul Lecuq Date: Sun, 24 Jan 2021 19:01:56 +0100 Subject: [PATCH] updated nftables state --- states/nftables/nftables.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/states/nftables/nftables.conf.j2 b/states/nftables/nftables.conf.j2 index 5bacc4c..f461818 100644 --- a/states/nftables/nftables.conf.j2 +++ b/states/nftables/nftables.conf.j2 @@ -18,7 +18,7 @@ add rule ip filter input ip saddr {{ value.ip }}/{{ value.mask }} ct state estab {%- for key, value in net.public_ports.items() %} add rule ip filter input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept {%- endfor %} -add rule ip filter input counter log +#add rule ip filter input counter log ## IPv4 NAT add table ip nat @@ -45,4 +45,4 @@ add rule ip6 filter6 input ip6 saddr {{ value.ip }}/{{ value.mask }} ct state es {%- for key, value in net.public_ports.items() %} add rule ip6 filter6 input {{ value.proto }} dport {{ value.port }} ct state established,new counter accept {%- endfor %} -add rule ip6 filter6 input counter log \ No newline at end of file +#add rule ip6 filter6 input counter log