Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / spec / defines @ 04176b0e

# Date Auteur Commentaire
948ebc98 2020-12-11 02:25 Nacho Barrientos

Prefix custom tables with custom- so they're loaded
bacf254e 2020-12-11 02:19 Nacho Barrientos

Merge pull request #48 from cernops/config_template

Several fixes for nftables::config
04f5c035 2020-12-10 02:24 Nacho Barrientos

Fix context name (removes dup)
294a38ff 2020-12-10 02:23 Nacho Barrientos

Implement intended failure
fcb1d356 2020-12-10 02:23 Nacho Barrientos

Auto fill simple table configuration
3a469f2b 2020-12-09 11:44 Nacho Barrientos

Implement nftables::simplerule::saddr
5944b9cb 2020-12-09 11:44 Nacho Barrientos

Allow some other types of verdicts
77abc10b 2020-12-09 11:44 Nacho Barrientos

Implement nftables::simplerule::sport
6793d286 2020-12-09 11:44 Nacho Barrientos

Handle dport internally always as an array
d43ced4d 2020-12-09 11:44 Nacho Barrientos

Implement nftables:;simplerule::counter
aaa37172 2020-12-09 11:44 Nacho Barrientos

Implement nftables:;simplerule::daddr
d38aab5b 2020-12-09 11:44 Nacho Barrientos

Test passing a port without protocol
316bc3f8 2020-12-09 11:44 Nacho Barrientos

Allow IPv4 and IPv6 only rules
3a52fb41 2020-12-09 11:44 Nacho Barrientos

Richer dport
83382bb5 2020-12-09 11:44 Nacho Barrientos

Add nftables::simplerule
7e5b657a 2020-12-08 11:49 Steve Traylen

rubocop:auto_correct fixes
30462da1 2020-11-26 05:19 Steve Traylen

Reload rules atomically

Background: The unit file for nftables on CentOS 8 contains:

```
ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf
ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'
ExecStop=/sbin/nft flush ruleset
```...
61f03b47 2020-11-19 09:19 Steve Traylen

Switch $order$fragmenta/b to $order-$fragment-a/b
e53053ce 2020-11-19 08:31 Steve Traylen

Add comments for all the nftable::rules entries

For each nftable::rule this adds an extra concat fragment to
add a comment containing the name and order number for the rule.

The motivation here is to make the mapping from resulting rules back
to puppet code more obvious. When adding a new rule it should be more...
7bb485c5 2020-11-16 09:19 Nacho Barrientos

Allow dashes in set names
9f0498e3 2020-11-16 09:16 Nacho Barrientos

Relax nftables::set::type making it optional

This is needed in case nftables::set is passed raw configuration via
source or content.
20b96360 2020-11-13 09:57 Nacho Barrientos

Add support for named sets