1 {%+ if (zone.masq ^ zone.masq6): -%}
2 meta nfproto {{ fw4.nfproto(zone.masq ? 4 : 6) }} {%+ endif -%}
3 {%+ include("zone-match.uc", { egress: true, rule }) -%}
4 ct state invalid {%+ if (zone.counter): -%}
6 {%+ if (zone.log & 1): -%}
7 log prefix "drop {{ zone.name }} invalid ct state: " {%+ endif -%}
8 drop comment "!fw4: Prevent NAT leakage"