Historique | Voir | Annoter | Télécharger (5,09 ko)
Allow creating a totally empty firewall
By setting `nftables::inet_filter` and `nftables::nat` to `false`users can now start off from a totally empty firewall and add thetables, chains and rules they'd like.
The default skeleton for inet-filter, ip-nat and ip6-nat is kept...
Amend link to Yasnippets
I reorganised my dotfiles a bit so this link must be changed. Sorryfor the noise.
Add fact section to README.md
Add pointer to Yasnippets for some defined types
Improve sections' formatting
Improve nftables::rule's documentation (#68)
Add badges to README
Mention nftables::simplerule in the README
Add a hint about changing default output configuration
Fix typo in class name
Add a separation between the header and the content
Add remark about the global chain
Fix grammatical error
Add full stop
Reload rules atomically
Background: The unit file for nftables on CentOS 8 contains:
```ExecStart=/sbin/nft -f /etc/sysconfig/nftables.confExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'ExecStop=/sbin/nft flush ruleset```...
Add support for named sets
Create a special ingoing chain for all ingoing fwd rules
Adapt readme to the refactoring
initial release
