## {{ salt['pillar.get']('salt_managed', default='Salt Managed') }} {%- for key, value in salt['pillar.get']('net:ipv4_networks').items() %} allow {{ value.ip }}/{{ value.mask }}; {%- endfor %} {%- for key, value in salt['pillar.get']('net:ipv6_networks').items() %} allow {{ value.ip }}/{{ value.mask }}; {%- endfor %} deny all;