diff --git a/templates/nftables.conf.j2 b/templates/nftables.conf.j2 index c72bdb7..a35f961 100644 --- a/templates/nftables.conf.j2 +++ b/templates/nftables.conf.j2 @@ -13,7 +13,7 @@ {% set tmprule = firewall.chains[name][i] %} {% endif%} {% set rule = {}|combine(firewall.defaults.all, firewall.defaults[name], tmprule, recursive=True) %} -{{ nftrule(i, rule) }} + {{ nftrule(i, rule) }} {% endfor %} {% endmacro%} @@ -32,7 +32,7 @@ table inet filter { ip protocol icmp accept comment "Accept ICMP" ip protocol igmp accept comment "Accept IGMP" - {{ nftchain('input') }} +{{ nftchain('input') }} counter comment "Count dropped" @@ -41,7 +41,7 @@ table inet filter { type filter hook forward priority 0; policy {{ firewall.policies.forward }}; - {{ nftchain('forward') }} +{{ nftchain('forward') }} counter comment "Count dropped" } @@ -49,8 +49,8 @@ table inet filter { type filter hook output priority 0; policy {{ firewall.policies.output }}; - {{ nftchain('output') }} +{{ nftchain('output') }} } } -include "/etc/nftables/*.nft" +include "/etc/nftables.d/*.nft"