Add a define for ipv4 dnat
Create a special ingoing chain for all ingoing fwd rules
Rename file filter to inet-filter
Stop and mask firewalld service
add new rules
add a few more rules
Split init class
Use default
Rewrite ip-nat to concat
Replace filter with inet-filter
Refactoring
Add a newline to filter chains
Explicitly set ensure file
Write some spec tests for init class
Linting
Set NAT only for IPv4
Allow to set a list of dns servers
Add in/out rules for Tor
Add a in rule for icinga2
Add in rule for puppet
Add in/out rules for wireguard
Add a rule for dhcpc
Remove out rule ntp
Duplicate to chrony, but chrony allows every sport (which is required bychrony).
add outgoing puppet
Allow http by default
CentOS mirrors are only available over http.
Apply a base firewall
Allow all services to install updates and manage the node.
Add a class for outgoing ntp
Add a class for outgoing https
Add a class for outgoing dns
fix naming
initial release