From 71c3dccba95e460c4cfef172ee71bfb64a34b740 Mon Sep 17 00:00:00 2001 From: nd Date: Thu, 30 Apr 2020 15:41:02 +0200 Subject: [PATCH] some cleanup --- templates/nftables.conf.j2 | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/templates/nftables.conf.j2 b/templates/nftables.conf.j2 index c72bdb7..a35f961 100644 --- a/templates/nftables.conf.j2 +++ b/templates/nftables.conf.j2 @@ -13,7 +13,7 @@ {% set tmprule = firewall.chains[name][i] %} {% endif%} {% set rule = {}|combine(firewall.defaults.all, firewall.defaults[name], tmprule, recursive=True) %} -{{ nftrule(i, rule) }} + {{ nftrule(i, rule) }} {% endfor %} {% endmacro%} @@ -32,7 +32,7 @@ table inet filter { ip protocol icmp accept comment "Accept ICMP" ip protocol igmp accept comment "Accept IGMP" - {{ nftchain('input') }} +{{ nftchain('input') }} counter comment "Count dropped" @@ -41,7 +41,7 @@ table inet filter { type filter hook forward priority 0; policy {{ firewall.policies.forward }}; - {{ nftchain('forward') }} +{{ nftchain('forward') }} counter comment "Count dropped" } @@ -49,8 +49,8 @@ table inet filter { type filter hook output priority 0; policy {{ firewall.policies.output }}; - {{ nftchain('output') }} +{{ nftchain('output') }} } } -include "/etc/nftables/*.nft" +include "/etc/nftables.d/*.nft"