Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / spec / defines @ d43ced4d

# Date Auteur Commentaire
d43ced4d 2020-12-09 11:44 Nacho Barrientos

Implement nftables:;simplerule::counter
aaa37172 2020-12-09 11:44 Nacho Barrientos

Implement nftables:;simplerule::daddr
d38aab5b 2020-12-09 11:44 Nacho Barrientos

Test passing a port without protocol
316bc3f8 2020-12-09 11:44 Nacho Barrientos

Allow IPv4 and IPv6 only rules
3a52fb41 2020-12-09 11:44 Nacho Barrientos

Richer dport
83382bb5 2020-12-09 11:44 Nacho Barrientos

Add nftables::simplerule
7e5b657a 2020-12-08 11:49 Steve Traylen

rubocop:auto_correct fixes
30462da1 2020-11-26 05:19 Steve Traylen

Reload rules atomically

Background: The unit file for nftables on CentOS 8 contains:

```
ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf
ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'
ExecStop=/sbin/nft flush ruleset
```...
61f03b47 2020-11-19 09:19 Steve Traylen

Switch $order$fragmenta/b to $order-$fragment-a/b
e53053ce 2020-11-19 08:31 Steve Traylen

Add comments for all the nftable::rules entries

For each nftable::rule this adds an extra concat fragment to
add a comment containing the name and order number for the rule.

The motivation here is to make the mapping from resulting rules back
to puppet code more obvious. When adding a new rule it should be more...
7bb485c5 2020-11-16 09:19 Nacho Barrientos

Allow dashes in set names
9f0498e3 2020-11-16 09:16 Nacho Barrientos

Relax nftables::set::type making it optional

This is needed in case nftables::set is passed raw configuration via
source or content.
20b96360 2020-11-13 09:57 Nacho Barrientos

Add support for named sets