Add nftables.version to structured fact.
```FACTERLIB=. facter -p nftables { tables => [ "bridge-filter", "bridge-nat", "inet-firewalld", "ip-firewalld", "ip6-firewalld" ], version => "0.9.3" }```
Merge pull request #82 from cernops/ibarrien_activemq
Add rules for Apache ActiveMQ
Merge pull request #81 from cernops/emacs_readme
Fix sections and add a pointer to code snippets for Emacs
Add pointer to Yasnippets for some defined types
Improve sections' formatting
Release 1.2.1-rc0 (#77)
Release 1.2.0 (#76)
fix #74 - ensure table are initialized before flushing them (#75)
Merge pull request #73 from Koumbit/global_chain_not_hardcoded
start declaring the 'global' chain with module resources
create tests for presence of the "global" chain
the 'global' chain is a vestigial piece of early development on thismodule, but it can be useful for creating fast short-circuits likeblocking traffic that match a certain set of IPs.
in the current state we can't inject rules inside the 'global' chain...
Bump version to 1.1.2-rc0 (#72)
Manual MR due to travis_release being broken by necessity to approve.
https://github.com/voxpupuli/puppet-nftables/issues/61
Release 1.1.1 (#71)
Merge pull request #70 from cernops/issue69
Fix IP version filter for IPv6 traffic
Add unit test
Improve nftables::rule's documentation (#68)
[blacksmith] Bump version to 1.1.1-rc0
Release 1.1.0 (#67)
Merge pull request #60 from duritong/more_mail_client_rules
add some mail related outgoing rules
Merge pull request #63 from traylenator/badges
Add badges to README
Merge pull request #64 from traylenator/params
Enable parameter_documentation lint
Merge pull request #62 from glpatcern/master
Added Samba in rules
The linter checks that every parameter has been documented.
While corrections have been made to great many classes some morecomplicated examples have been left for now. Should be updatedas the files get touched.
https://github.com/domcleal/puppet-lint-param-docs
Removed unneeded parentheses
Updated docs
Co-authored-by: Nacho Barrientos <nacho@criptonita.com>
Merge pull request #53 from cernops/allrules_check
Check that all the predefined rules are declared in the all rules acceptance test
Made ctdb rule parameterized
Use a separate job file
Check that all rules are declared in the all rules acceptance test
Merge pull request #59 from cernops/issue58
Align simplerule and rule rulename requirements
Pull up rule regexp to type aliases
Added to tests
[blacksmith] Bump version to 1.0.1-rc0
Release 1.0.0 (#49)
Co-authored-by: duritong <peter.meier+github@immerda.ch>
Merge pull request #56 from traylenator/ports
Use Stdlib::Port everywhere in place of Integer
Use Stdlib::Port in place of Integer for ports
Fixes #37
Merge pull request #55 from traylenator/moredocs
Docs for nftables::set
Update manifests/set.pp
Merge pull request #42 from duritong/terminology
switch not the server naming
switch naming to puppetserver
Merge pull request #47 from cernops/issue45
Prefix custom tables with custom- so they're loaded
Merge pull request #48 from cernops/config_template
Several fixes for nftables::config
Merge pull request #50 from traylenator/moretests
Correct nfs3 invalid udp /tcp matching rule and more tests
Correct NFS udp and tcp port matching
There was a missing `th` from rule which from the examples in the manpage is meant to be there.
Cannot find the docs for what `th` does.
test that all classes can be included
test that bad configuration leaves service running
Merge pull request #52 from cernops/simplerule_reference
Remove a blank separating the doc string and the code
Otherwise the generator of the docs does not do the job :/
Merge pull request #51 from bastelfreak/puppet7
Enable Puppet 7 support
Merge pull request #33 from cernops/simplerule
Add nftables::simplerule
Validate table spec
Fix context name (removes dup)
Implement intended failure
Auto fill simple table configuration
Refresh REFERENCE
Relax type validation in template
It comes already validated from the calling class.
Align template parameters
Encapsulate addr-related exprs in Nftables::Addr
Encapsulate port-related exprs in Nftables::Port
Sort template parameters alphabetically
Implement nftables::simplerule::saddr
Mention nftables::simplerule in the README
Allow some other types of verdicts
Document nftables::simplerule's parameters
Recommend using nftables::rule
Implement nftables::simplerule::sport
Remove double spacing
Handle dport internally always as an array
Lint fixes
Remove optional modifier on $table
It does not really make sense to pass undef to nftables::rule
Correct error message
Re-document and add example
Implement nftables:;simplerule::counter
Implement nftables:;simplerule::daddr
Test passing a port without protocol
Allow IPv4 and IPv6 only rules
Richer dport
s/setname/rulename
Merge pull request #34 from traylenator/dedupe_flush
Remove duplicate flush on reload
Merge pull request #44 from traylenator/formatting
Correct layout of ignore table example
Correct layout of ignore chain example
When nftables was reloaded a flush was being done both in the systemdreload call and in the nft script itself.
Merge pull request #41 from traylenator/rubocop
rubocop corrections
Merge pull request #43 from cernops/doc_typos
Fix typos and formatting in the README
Add a hint about changing default output configuration
Fix typo in class name
Add a separation between the header and the content
Add remark about the global chain
Fix grammatical error
Add full stop
