Historique | Voir | Annoter | Télécharger (5,61 ko)
Added purge_unmanaged_rules new variant of method
fix nft sample command
I don't know what the nfc command is, but it certainly looks like atypo. Also, the flag to include a directory is `-I` here, not `-L`.
cleanup: more style and markup editing
add basic usage instructions right at the top
I couldn't figure out how to use this module when I looked at theREADME. It was quickly going into pretty arcane stuff like "inetfilter" and "ip nat table" which might make sense for the moduleauthors or people used to nftables/iptables, but are pretty...
Allow creating a totally empty firewall
By setting `nftables::inet_filter` and `nftables::nat` to `false`users can now start off from a totally empty firewall and add thetables, chains and rules they'd like.
The default skeleton for inet-filter, ip-nat and ip6-nat is kept...
Amend link to Yasnippets
I reorganised my dotfiles a bit so this link must be changed. Sorryfor the noise.
Add fact section to README.md
Add pointer to Yasnippets for some defined types
Improve sections' formatting
Improve nftables::rule's documentation (#68)
Add badges to README
Mention nftables::simplerule in the README
Add a hint about changing default output configuration
Fix typo in class name
Add a separation between the header and the content
Add remark about the global chain
Fix grammatical error
Add full stop
Reload rules atomically
Background: The unit file for nftables on CentOS 8 contains:
```ExecStart=/sbin/nft -f /etc/sysconfig/nftables.confExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'ExecStop=/sbin/nft flush ruleset```...
Add support for named sets
Create a special ingoing chain for all ingoing fwd rules
Adapt readme to the refactoring
initial release
