|
|
|
@ -15,10 +15,6 @@ COMMIT
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
:VYATTA_CT_PREROUTING_HOOK - [0:0]
|
|
|
|
:VYATTA_CT_PREROUTING_HOOK - [0:0]
|
|
|
|
-A PREROUTING -j NOTRACK
|
|
|
|
-A PREROUTING -j NOTRACK
|
|
|
|
{% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
|
|
|
|
|
|
|
|
-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
-A VYATTA_CT_PREROUTING_HOOK -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
{% endif %}{% endfor %}
|
|
|
|
|
|
|
|
COMMIT
|
|
|
|
COMMIT
|
|
|
|
|
|
|
|
|
|
|
|
*nat
|
|
|
|
*nat
|
|
|
|
@ -30,8 +26,14 @@ COMMIT
|
|
|
|
|
|
|
|
|
|
|
|
*mangle
|
|
|
|
*mangle
|
|
|
|
:PREROUTING ACCEPT [0:0]
|
|
|
|
:PREROUTING ACCEPT [0:0]
|
|
|
|
|
|
|
|
{% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
|
|
|
|
|
|
|
|
-A PREROUTING -i {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
{% endif %}{% endfor %}
|
|
|
|
:INPUT ACCEPT [0:0]
|
|
|
|
:INPUT ACCEPT [0:0]
|
|
|
|
:FORWARD ACCEPT [0:0]
|
|
|
|
:FORWARD ACCEPT [0:0]
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
:POSTROUTING ACCEPT [0:0]
|
|
|
|
:POSTROUTING ACCEPT [0:0]
|
|
|
|
|
|
|
|
{% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}{% if salt['pillar.get']('interfaces:'+iface_name+':netflow') %}
|
|
|
|
|
|
|
|
-A POSTROUTING -o {{ iface_name }} -j NFLOG --nflog-group 2 --nflog-range 64 --nflog-threshold 10
|
|
|
|
|
|
|
|
{% endif %}{% endfor %}
|
|
|
|
COMMIT
|
|
|
|
COMMIT
|
|
|
|
|
