aboutsummaryrefslogtreecommitdiff
path: root/templates/ferm_chain_header.conf.epp
blob: f94b18d7cb0e6fe72cbaed5deccd4f80f18ba2e5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
<%- | Ferm::Policies $policy,
      Boolean $disable_conntrack,
| -%>
# THIS FILE IS MANAGED BY PUPPET
# Default policy for this chain
policy <%= $policy %>;

<% unless $disable_conntrack { -%>
# connection tracking
mod state state INVALID DROP;
mod state state (ESTABLISHED RELATED) ACCEPT;
<% } -%>