From a3dd4eba6594019574feb94ca6c112451ee84e00 Mon Sep 17 00:00:00 2001 From: Timotej Lazar Date: Fri, 26 Jul 2024 10:14:23 +0200 Subject: [PATCH] =?UTF-8?q?alpine:=20don=E2=80=99t=20assume=20all=20servic?= =?UTF-8?q?es=20are=20TCP?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- roles/alpine/templates/local.nft.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/alpine/templates/local.nft.j2 b/roles/alpine/templates/local.nft.j2 index 4a1d32f..484a8e8 100644 --- a/roles/alpine/templates/local.nft.j2 +++ b/roles/alpine/templates/local.nft.j2 @@ -12,10 +12,10 @@ table inet filter { {% endif %} {% if prefixes4 or prefixes6 %} {% if prefixes4 %} - ip saddr { {{ prefixes4 | join(', ') }} } tcp dport { {{ ports }} } accept + ip saddr { {{ prefixes4 | join(', ') }} } {{ service.protocol.value }} dport { {{ ports }} } accept {% endif %} {% if prefixes6 %} - ip6 saddr { {{ prefixes6 | join(', ') }} } tcp dport { {{ ports }} } accept + ip6 saddr { {{ prefixes6 | join(', ') }} } {{ service.protocol.value }} dport { {{ ports }} } accept {% endif %} {% else %} tcp dport { {{ ports }} } accept