{% load conntrackt_tags %}

# iptables rules generated by conntrackt for {{entity}}

*filter

{% for interface in entity.interface_set.all %}

  {% for communication in interface.destination_set.all %}

    {% ifchanged communication.description %}

{% iptables communication %}

  {% endfor %}

{% endfor %}

:OUTPUT ACCEPT [0:0]

COMMIT

*nat