diff --git a/iptables/templates/iptables-rules.v4.j2 b/iptables/templates/iptables-rules.v4.j2 index 20abbb01..ce8b9e07 100644 --- a/iptables/templates/iptables-rules.v4.j2 +++ b/iptables/templates/iptables-rules.v4.j2 @@ -258,7 +258,6 @@ {% endif %} {% endfor %} {% endif %} -{% endif %} {% if iptables.any_rules is defined and iptables.any_rules %} # ANY rules {% for any_rule in iptables.any %} @@ -267,12 +266,13 @@ {% endfor %} {% endfor %} {% endif %} +# End of the custom rules +{% endif %} {% if keepalived_enabled is defined and keepalived_enabled %} -A INPUT -p vrrp -d {{ keepalived_mcast_addr }} -j ACCEPT -A OUTPUT -p vrrp -d {{ keepalived_mcast_addr }} -j ACCEPT {% endif %} # --A INPUT -s 125.24.0.0/14 -j DROP {% if iptables_input_default_policy == 'REJECT' %} -A INPUT -j REJECT --reject-with icmp-host-prohibited {% else %}