Merge pull request #3693 from nicolas-fort/T3900-fix-template

T3900: firewall: fix for initial implementation
vyos · Jun 20, 2024 · 442bf37 · 442bf37
2 parents 109e094 + 7829229
commit 442bf37
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2
@@ -86,7 +86,7 @@ table ip vyos_filter {
 {%         for prior, conf in ipv4.output.items() %}
     chain VYOS_OUTPUT_{{ prior }} {
         type filter hook output priority {{ prior }}; policy accept;
-{%             if global_options.state_policy is vyos_defined %}
+{%             if global_options.state_policy is vyos_defined and prior == 'filter' %}
         jump VYOS_STATE_POLICY
 {%             endif %}
 {%             if conf.rule is vyos_defined %}