From 6834b4ec4ca34c79f8d8461c588366608e3c73ab Mon Sep 17 00:00:00 2001 From: tomasz-c <12180991+tomasz-c@users.noreply.github.com> Date: Tue, 7 Jan 2025 18:11:29 +0100 Subject: [PATCH] Fix: Add default_policy variable to FORWARD_TEMPLATE --- nft-blackhole.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/nft-blackhole.py b/nft-blackhole.py index 4939a49..e99b711 100755 --- a/nft-blackhole.py +++ b/nft-blackhole.py @@ -43,7 +43,7 @@ SET_TEMPLATE = ('table inet blackhole {\n\tset ${set_name} {\n\t\ttype ${ip_ver}_addr\n' '\t\tflags interval\n\t\tauto-merge\n\t\telements = { ${ip_list} }\n\t}\n}').expandtabs() -FORWARD_TEMPLATE = ('\tchain forward {\n\t\ttype filter hook forward priority -1; policy accept;\n' +FORWARD_TEMPLATE = ('\tchain forward {\n\t\ttype filter hook forward priority -1; policy ${default_policy};\n' '\t\tct state established,related accept\n' '\t\tip saddr @whitelist-v4 counter accept\n' '\t\tip6 saddr @whitelist-v6 counter accept\n' @@ -92,7 +92,8 @@ chain_output = '' if BLOCK_FORWARD: - chain_forward = Template(FORWARD_TEMPLATE).substitute(block_policy=block_policy, + chain_forward = Template(FORWARD_TEMPLATE).substitute(default_policy=default_policy, + block_policy=block_policy, country_policy=country_policy, country_ex_ports_rule=country_ex_ports_rule) else: