|
|
|
@ -9,7 +9,12 @@ COMMIT
|
|
|
|
*raw
|
|
|
|
*raw
|
|
|
|
:PREROUTING ACCEPT [0:0]
|
|
|
|
:PREROUTING ACCEPT [0:0]
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
|
|
|
|
:VYATTA_CT_PREROUTING_HOOK - [0:0]
|
|
|
|
-A PREROUTING -j NOTRACK
|
|
|
|
-A PREROUTING -j NOTRACK
|
|
|
|
|
|
|
|
{% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
|
|
|
|
|
|
|
|
-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
-A VYATTA_CT_PREROUTING_HOOK -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
{% endif %}{% endfor %}
|
|
|
|
COMMIT
|
|
|
|
COMMIT
|
|
|
|
|
|
|
|
|
|
|
|
*nat
|
|
|
|
*nat
|
|
|
|
|
