fw4: add device iifname/oifname matches to DSCP and MARK rules

[project/firewall4.git] / root / usr / share / firewall4 / templates / rule.uc

diff --git a/root/usr/share/firewall4/templates/rule.uc b/root/usr/share/firewall4/templates/rule.uc
index 518b9ccdae77db68be363bce1bc6dfa9f3faf768..417bef7d2d995fd9ac124f2d29525448bbfcd015 100644 (file)
--- a/root/usr/share/firewall4/templates/rule.uc
+++ b/root/usr/share/firewall4/templates/rule.uc
@@ -4,6 +4,10 @@
        meta l4proto {{
                (rule.proto.name == 'icmp' && rule.family == 6) ? 'ipv6-icmp' : rule.proto.name
        }} {%+ endif -%}
+{%+ if (rule.iifnames): -%}
+       iifname {{ fw4.set(rule.iifnames) }} {%+ endif -%}
+{%+ if (rule.oifnames): -%}
+       oifname {{ fw4.set(rule.oifnames) }} {%+ endif -%}
 {%+ if (rule.saddrs_pos): -%}
        {{ fw4.ipproto(rule.family) }} saddr {{ fw4.set(rule.saddrs_pos) }} {%+ endif -%}
 {%+ if (rule.saddrs_neg): -%}