Revert "host_firewall: sources zone accepts tcp ports from listed addresses alone"

This reverts commit 0abc9fb1c3.
This commit is contained in:
2026-10-28 14:02:36 +00:00
parent 0abc9fb1c3
commit 32651402c6
2 changed files with 0 additions and 10 deletions
-8
View File
@@ -367,14 +367,6 @@ table inet host {
{% if list(firewall.public.udp) %}
udp dport { {{ list(firewall.public.udp) }} } accept
{% endif %}
{% for src in firewall.sources | default({}, true) | dict2items | rejectattr('value', 'none') | map(attribute='value') %}
{% if list(src.tcp) and list(src.v4) %}
ip saddr { {{ list(src.v4) }} } tcp dport { {{ list(src.tcp) }} } accept
{% endif %}
{% if list(src.tcp) and list(src.v6) %}
ip6 saddr { {{ list(src.v6) }} } tcp dport { {{ list(src.tcp) }} } accept
{% endif %}
{% endfor %}
{% if list(firewall.geo.tcp) %}
tcp dport { {{ list(firewall.geo.tcp) }} } jump geo
{% endif %}