X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/cc57b9e9a6f06eb2fdce5ed83aa5f9ed6cd90cad..84b5aa673d3d29cbf124c93abaa4c6995b9c1ea5:/cookbooks/networking/templates/default/nftables.conf.erb?ds=sidebyside diff --git a/cookbooks/networking/templates/default/nftables.conf.erb b/cookbooks/networking/templates/default/nftables.conf.erb index 957955af4..cc3cd8f7f 100644 --- a/cookbooks/networking/templates/default/nftables.conf.erb +++ b/cookbooks/networking/templates/default/nftables.conf.erb @@ -57,6 +57,13 @@ table inet chef-filter { <%- end %> } +<%- end %> + +<%- node[:networking][:firewall][:helpers].each do |helper| %> + ct helper <%= helper[:name] %> { + type "<%= helper[:helper] %>" protocol <%= helper[:protocol] %> + } + <%- end %> chain log-and-drop { limit rate 1/second log