nftables-geoip-update.j2
No OneTemporary
Actions

Size

769 B

Referenced Files

None

Subscribers

None

nftables-geoip-update.j2
View Options

	#!/usr/sbin/nft -f

	{% if ipv4_sets is vyos_defined %}
	{% for setname, ip_list in ipv4_sets.items() %}
	flush set ip vyos_filter {{ setname }}
	{% endfor %}

	table ip vyos_filter {
	{% for setname, ip_list in ipv4_sets.items() %}
	set {{ setname }} {
	type ipv4_addr
	flags interval
	elements = { {{ ','.join(ip_list) }} }
	}
	{% endfor %}
	}
	{% endif %}

	{% if ipv6_sets is vyos_defined %}
	{% for setname, ip_list in ipv6_sets.items() %}
	flush set ip6 vyos_filter {{ setname }}
	{% endfor %}

	table ip6 vyos_filter {
	{% for setname, ip_list in ipv6_sets.items() %}
	set {{ setname }} {
	type ipv6_addr
	flags interval
	elements = { {{ ','.join(ip_list) }} }
	}
	{% endfor %}
	}
	{% endif %}