blob: f94b18d7cb0e6fe72cbaed5deccd4f80f18ba2e5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
<%- | Ferm::Policies $policy,
Boolean $disable_conntrack,
| -%>
# THIS FILE IS MANAGED BY PUPPET
# Default policy for this chain
policy <%= $policy %>;
<% unless $disable_conntrack { -%>
# connection tracking
mod state state INVALID DROP;
mod state state (ESTABLISHED RELATED) ACCEPT;
<% } -%>
|
