Revert "host_firewall: sources zone accepts tcp ports from listed addresses alone"
This reverts commit 0abc9fb1c3.
This commit is contained in:
@@ -367,14 +367,6 @@ table inet host {
|
||||
{% if list(firewall.public.udp) %}
|
||||
udp dport { {{ list(firewall.public.udp) }} } accept
|
||||
{% endif %}
|
||||
{% for src in firewall.sources | default({}, true) | dict2items | rejectattr('value', 'none') | map(attribute='value') %}
|
||||
{% if list(src.tcp) and list(src.v4) %}
|
||||
ip saddr { {{ list(src.v4) }} } tcp dport { {{ list(src.tcp) }} } accept
|
||||
{% endif %}
|
||||
{% if list(src.tcp) and list(src.v6) %}
|
||||
ip6 saddr { {{ list(src.v6) }} } tcp dport { {{ list(src.tcp) }} } accept
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
{% if list(firewall.geo.tcp) %}
|
||||
tcp dport { {{ list(firewall.geo.tcp) }} } jump geo
|
||||
{% endif %}
|
||||
|
||||
Reference in New Issue
Block a user