blob: e2c30e6b569fc7b106d000675ec58c4e45be227a (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
<%- | Ferm::Policies $policy,
Boolean $disable_conntrack,
| -%>
# Default policy for this chain
policy <%= $policy %>;
<% unless $disable_conntrack { -%>
# connection tracking
mod state state INVALID DROP;
mod state state (ESTABLISHED RELATED) ACCEPT;
<% } -%>
|
