From e524963387ca2dd97dd7ff823a09be2b845bad87 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Tue, 15 Aug 2023 12:23:08 -0700
Subject: [PATCH] iptables: fix conditional

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/base/templates/iptables/iptables | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/base/templates/iptables/iptables b/roles/base/templates/iptables/iptables
index 527842b3b6..a629688a82 100644
--- a/roles/base/templates/iptables/iptables
+++ b/roles/base/templates/iptables/iptables
@@ -15,7 +15,7 @@
 -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
 
 # if the host is external, block some ips
-{% if datacenter != 'iad2' or external == 'true' %}
+{% if datacenter != 'iad2' or external %}
 -A INPUT -p all -m set --match-set blocklist src -j REJECT
 {% endif %}