Skip to content

Commit 7829229

Browse files
committedJun 20, 2024·
T3900: firewall: fix for initial implementation - remove jump to state policy on OUTUT_raw
1 parent 109e094 commit 7829229

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed
 

‎data/templates/firewall/nftables.j2

+1-1
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ table ip vyos_filter {
8686
{% for prior, conf in ipv4.output.items() %}
8787
chain VYOS_OUTPUT_{{ prior }} {
8888
type filter hook output priority {{ prior }}; policy accept;
89-
{% if global_options.state_policy is vyos_defined %}
89+
{% if global_options.state_policy is vyos_defined and prior == 'filter' %}
9090
jump VYOS_STATE_POLICY
9191
{% endif %}
9292
{% if conf.rule is vyos_defined %}

0 commit comments

Comments
 (0)
Please sign in to comment.