foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nftables: Fix support for raw rules

Browse source
This commit is contained in:
Timo Makinen 2025-04-05 19:51:54 +00:00
parent 46a15fb9ce
commit ededecd167
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/nftables/templates/nftables.conf.j2
View file

@ -8,6 +8,11 @@ table ip filter {
ct state vmap { established : accept, related : accept } ct state vmap { established : accept, related : accept }
ip protocol icmp accept ip protocol icmp accept
iifname lo accept iifname lo accept
{% if firewall_raw is defined %}
{% for rule in firewall_raw %}
{{ rule }}
{% endfor %}
{% endif %}
{% for rule in firewall_in %} {% for rule in firewall_in %}
{% if rule.from is defined %} {% if rule.from is defined %}
{% for from in rule.from %} {% for from in rule.from %}
@ -35,6 +40,11 @@ table ip6 filter {
type filter hook input priority 0; policy accept type filter hook input priority 0; policy accept
ct state vmap { established : accept, related : accept } ct state vmap { established : accept, related : accept }
ip6 nexthdr icmpv6 accept ip6 nexthdr icmpv6 accept
{% if firewall_raw6 is defined %}
{% for rule in firewall_raw6 %}
{{ rule }}
{% endfor %}
{% endif %}
{% for rule in firewall_in %} {% for rule in firewall_in %}
{% if rule.from is defined %} {% if rule.from is defined %}
{% for from in rule.from %} {% for from in rule.from %}