24 lines
880 B
Ucode
24 lines
880 B
Ucode
# Do not edit, automatically generated. See /usr/share/snort/templates.
|
|
{%
|
|
// Copyright (c) 2023-2024 Eric Fahlgren <eric.fahlgren@gmail.com>
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
let queues = `${nfq.queue_start}-${int(nfq.queue_start)+int(nfq.queue_count)-1}`;
|
|
let chain_type = nfq.chain_type;
|
|
-%}
|
|
|
|
table inet snort {
|
|
chain {{ chain_type }}_{{ snort.mode }} {
|
|
type filter hook {{ chain_type }} priority {{ nfq.chain_priority }}
|
|
policy accept
|
|
{% if (nfq.include) {
|
|
// We use the ucode include here, so that the included file is also
|
|
// part of the template and can use values passed in from the config.
|
|
printf("\n\t\t" + rpad(`#-- Include from '${nfq.include}'`, ">", 64) + "\n");
|
|
include(nfq.include, { snort, nfq });
|
|
printf("\t\t" + rpad("#-- End of included file.", "<", 64) + "\n\n");
|
|
} %}
|
|
counter queue flags bypass to {{ queues }}
|
|
}
|
|
}
|