Add support for Arch Linux
Arch Linux stores the configuration in a different path and does notprovide firewalld without explicit installation.
This basically the same as #66 – I've reused their code since it hasn'tbeen merged in a while.
Merge pull request #125 from hashworks/fix/serviceRemainAfterExit
Ensure that nftables.service remains active after it exits
Some system-packages don't include it in the service-file and we expectit. See #124.
Merge pull request #112 from keachi/ospf_protocol
Use protocol number instead of label
Merge pull request #122 from hashworks/fix/referenceInitialExamples
Fix typos in initial reference examples
Merge pull request #121 from traylenator/paramdocs
vp-puppet-lint-plugin enables param-docs already
Merge pull request #120 from nbarrientos/rhel9
Declare support for RHEL9, CentOS9 and OL9
Make sure that the list of interfaces is mocked
If 'networking' is not removed from the facts, the values declared in`default_module_facts.yml` win (the fact set contains two keys:`:networking` and `'networking'`)
This test has always been wrong as the interfaces were never been...
No need to enable puppet-lint-param-docs locally since version 3.0.0of voxpupuli-puppet-lint-plugins enables param-docs anyway.
https://github.com/voxpupuli/voxpupuli-puppet-lint-plugins/commit/5c207d586878162218e45ce50bcfd927588796c9
Merge pull request #118 from traylenator/rubocop
Rubocop corrections for rubocop 1.22.3
rubocop - RSpec/RepeatedExampleGroupBody
rubocop -f RSpec/RepeatedExampleGroupDescription
rubocop:auto_correct results
modulesync 5.1.0
The label was `ospf` and will be `ospfigp` in the future. Instead ofcreating a map use the protocol number to be compatible with newerversions.
Merge pull request #110 from voxpupuli/modulesync
modulesync 4.2.0
Pet rubocop
Fix .sync.yml
Typo introduced in 09cba1822af345c6fe7d4db1a49921f12a53cb31
Merge pull request #109 from cernops/ibarrien_rc
Release 2.1.1-rc0
Merge pull request #108 from cernops/release_210
Prepare release 2.1.0
Merge pull request #107 from figless/nat_table_name
support a different table name for 'nat'
support a different table name for 'nat'- Some applications (such as libvirt) still use iptables to inject firewall rules- iptables will refuse to update tables that were initially created with nft- This commit allows defining the name of the 'nat' table in order to avoid...
Merge pull request #106 from voxpupuli/stdlib
Allow stdlib 8.0.0
Merge pull request #103 from voxpupuli/systemd_voxpupuli
switch from camptocamp/systemd to voxpupuli/systemd
Merge pull request #104 from bastelfreak/optional
fix datatype for $table and $dport
fix datatype for $dport
fix datatype for $table
Merge pull request #102 from cernops/issue100
Allow declaring the same set in several tables
Closes #100
Merge pull request #99 from bastelfreak/fixtures
pull fixtures from git and not forge
Merge pull request #98 from traylenator/rc
Release 2.0.1-rc0
Merge pull request #97 from cernops/release_140
Prepare release 2.0.0
Merge pull request #96 from cernops/issue95
Allow creating a totally empty firewall
By setting `nftables::inet_filter` and `nftables::nat` to `false`users can now start off from a totally empty firewall and add thetables, chains and rules they'd like.
The default skeleton for inet-filter, ip-nat and ip6-nat is kept...
Merge pull request #93 from cernops/ibarrien_saddr
Fix IPv4 source address type detection
Before this patch, a rule like this:
``` nftables::simplerule { 'foo': action => 'accept', dport => 443, proto => 'tcp4', saddr => '192.168.1.10', }```
would incorrectly generate this rule:...
Merge pull request #92 from traylenator/everything
Drop Puppet 5, puppetlabs/concat 7.x, puppetlabs/stdlib 7.x, camptocamp/systemd: 3.x
Rely on puppet 6 calling daemon-reload
Since Puppet 6 now there no need to explicitlycall `systemctl daemon-reload`.
Merge remote-tracking branch 'kenyon/bump-concat' into everything
puppetlabs/concat: Allow 7.x
puppetlabs/stdlib: Allow 7.x
camptocamp/systemd: allow 3.x
Merge pull request #88 from cernops/dotfiles_yas_link
Amend link to Yasnippets
I reorganised my dotfiles a bit so this link must be changed. Sorryfor the noise.
Merge pull request #87 from cernops/bump_rc
Release 1.3.1-rc0
Merge pull request #86 from cernops/release_1_3_0
Prepare release 1.3.0
Merge pull request #85 from cernops/qemu
Add rules for QEMU/libvirt guests (bridged virtual networking)
Add rules for QEMU/libvirt guests
Merge pull request #80 from luisfdez/dockerce
Add Docker-CE default rules
Add optional handling of chains
Merge pull request #84 from traylenator/version
Add nftables.version to structured fact.
Add fact section to README.md
Fix doc defaults
```FACTERLIB=. facter -p nftables { tables => [ "bridge-filter", "bridge-nat", "inet-firewalld", "ip-firewalld", "ip6-firewalld" ], version => "0.9.3" }```
metadata.json: drop Puppet 5 support
Also bump puppetlabs/concat and puppetlabs/stdlib, whose versions7.0.0 also dropped support for Puppet 5.
Fixes #78
Fix rulename spec in spec
Fix syntax
Add newline & more tests
Merge pull request #82 from cernops/ibarrien_activemq
Add rules for Apache ActiveMQ
Merge pull request #81 from cernops/emacs_readme
Fix sections and add a pointer to code snippets for Emacs
Add pointer to Yasnippets for some defined types
Improve sections' formatting
Release 1.2.1-rc0 (#77)
Release 1.2.0 (#76)
fix #74 - ensure table are initialized before flushing them (#75)
Merge pull request #73 from Koumbit/global_chain_not_hardcoded
start declaring the 'global' chain with module resources
create tests for presence of the "global" chain
the 'global' chain is a vestigial piece of early development on thismodule, but it can be useful for creating fast short-circuits likeblocking traffic that match a certain set of IPs.
in the current state we can't inject rules inside the 'global' chain...
Bump version to 1.1.2-rc0 (#72)
Manual MR due to travis_release being broken by necessity to approve.
https://github.com/voxpupuli/puppet-nftables/issues/61
Release 1.1.1 (#71)
Merge pull request #70 from cernops/issue69
Fix IP version filter for IPv6 traffic
Add unit test
Improve nftables::rule's documentation (#68)
[blacksmith] Bump version to 1.1.1-rc0
Release 1.1.0 (#67)
Merge pull request #60 from duritong/more_mail_client_rules
add some mail related outgoing rules
Merge pull request #63 from traylenator/badges
Add badges to README
Merge pull request #64 from traylenator/params
Enable parameter_documentation lint
Merge pull request #62 from glpatcern/master
Added Samba in rules
The linter checks that every parameter has been documented.
While corrections have been made to great many classes some morecomplicated examples have been left for now. Should be updatedas the files get touched.
https://github.com/domcleal/puppet-lint-param-docs
Removed unneeded parentheses
Updated docs
Co-authored-by: Nacho Barrientos <nacho@criptonita.com>
Merge pull request #53 from cernops/allrules_check
Check that all the predefined rules are declared in the all rules acceptance test