<%- | String[1] $ip | -%> # End custom section domain (<%= $ip %>) table filter { chain INPUT { interface lo ACCEPT; @include '/etc/ferm.d/chains/INPUT.conf'; } chain OUTPUT { @include '/etc/ferm.d/chains/OUTPUT.conf'; } chain FORWARD { @include '/etc/ferm.d/chains/FORWARD.conf'; } }