From 859f8ba5cb553d66c9dcdbc232d17a0b641624df Mon Sep 17 00:00:00 2001 From: Thore Bödecker Date: Wed, 10 Jul 2019 16:37:50 +0200 Subject: allow preserving of chains in tables --- templates/ferm.conf.epp | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'templates/ferm.conf.epp') diff --git a/templates/ferm.conf.epp b/templates/ferm.conf.epp index b3aa0ce..0245a70 100644 --- a/templates/ferm.conf.epp +++ b/templates/ferm.conf.epp @@ -1,8 +1,17 @@ <%- | String[1] $ip, Stdlib::Absolutepath $configdirectory, +Hash[String[1], Array[String[1]]] $preserve_chains_in_tables, | -%> # End custom section +<%- $preserve_chains_in_tables.each |$table, $chains| { -%> +domain (<%= $ip %>) table <%= $table %> { + <%- $chains.each |$chain| { -%> + chain <%= $chain %> @preserve; + <%- } -%> +} +<%- } -%> + domain (<%= $ip %>) table filter { chain INPUT { interface lo ACCEPT; -- cgit v1.2.3