firewall: T7452: update rule generation for Zone-based firewall

Author: David Vølker

data/templates/firewall/nftables-zone.j2

@@ -13,7 +13,7 @@
 {%         endif %}
 {%         if 'vrf' in zone_conf.member %}
 {%             for vrf_name in zone_conf.member.vrf %}
-        oifname { {{ zone_conf['vrf_interfaces'][vrf_name] }} } counter jump VZONE_{{ zone_name }}
+        oifname { {{ zone[from_zone].member.vrf | join(",") }} } counter jump VZONE_{{ zone_name }}
 {%             endfor %}
 {%         endif %}
 {%     endif %}
@@ -70,8 +70,8 @@
 {%                 endif %}
 {%                 if 'vrf' in zone[from_zone].member %}
 {%                     for vrf_name in zone[from_zone].member.vrf %}
-        oifname { {{ zone[from_zone]['vrf_interfaces'][vrf_name] }} } counter jump NAME{{ suffix }}_{{ from_conf.firewall[fw_name] }}
-        oifname { {{ zone[from_zone]['vrf_interfaces'][vrf_name] }} } counter return
+        oifname { {{ zone[from_zone].member.vrf | join(",") }} } counter jump NAME{{ suffix }}_{{ from_conf.firewall[fw_name] }}
+        oifname { {{ zone[from_zone].member.vrf | join(",") }} }} } counter return
 {%                     endfor %}
 {%                 endif %}
 {%             endfor %}
@@ -112,4 +112,4 @@
     }
 {%     endif %}
 {% endfor %}
-{% endmacro %}
+{% endmacro %}