puppet nftables

modulesync 4.2.0

Merge pull request #109 from cernops/ibarrien_rc

Merge pull request #108 from cernops/release_210

Prepare release 2.1.0

Merge pull request #107 from figless/nat_table_name

support a different table name for 'nat'

Merge pull request #106 from voxpupuli/stdlib

Merge pull request #103 from voxpupuli/systemd_voxpupuli

switch from camptocamp/systemd to voxpupuli/systemd

Merge pull request #104 from bastelfreak/optional

fix datatype for $table and $dport

fix datatype for $table

Allow declaring the same set in several tables

Closes #100

pull fixtures from git and not forge

Release 2.0.1-rc0

Prepare release 2.0.0

Allow creating a totally empty firewall

By setting `nftables::inet_filter` and `nftables::nat` to `false`
users can now start off from a totally empty firewall and add the
tables, chains and rules they'd like.

The default skeleton for inet-filter, ip-nat and ip6-nat is kept...

Fix IPv4 source address type detection

Before this patch, a rule like this:

```
nftables::simplerule { 'foo':
action => 'accept',
dport => 443,
proto => 'tcp4',
saddr => '192.168.1.10',
}
```

would incorrectly generate this rule:...

Rely on puppet 6 calling daemon-reload

Since Puppet 6 now there no need to explicitly
call `systemctl daemon-reload`.

puppetlabs/concat: Allow 7.x

camptocamp/systemd: allow 3.x

Amend link to Yasnippets

I reorganised my dotfiles a bit so this link must be changed. Sorry
for the noise.

Release 1.3.1-rc0

Prepare release 1.3.0

Add rules for QEMU/libvirt guests

Add optional handling of chains

Add fact section to README.md

Add nftables.version to structured fact.

```
FACTERLIB=. facter -p nftables {
tables => [
"bridge-filter",
"bridge-nat",
"inet-firewalld",
"ip-firewalld",
"ip6-firewalld"
],
version => "0.9.3"
}
```

Fix rulename spec in spec

Add newline & more tests

Merge pull request #82 from cernops/ibarrien_activemq

Add rules for Apache ActiveMQ

Merge pull request #81 from cernops/emacs_readme

Fix sections and add a pointer to code snippets for Emacs

Improve sections' formatting

Release 1.2.0 (#76)

Merge pull request #73 from Koumbit/global_chain_not_hardcoded

start declaring the 'global' chain with module resources

start declaring the 'global' chain with module resources

the 'global' chain is a vestigial piece of early development on this
module, but it can be useful for creating fast short-circuits like
blocking traffic that match a certain set of IPs.

in the current state we can't inject rules inside the 'global' chain...

Release 1.1.1 (#71)

Add unit test

Improve nftables::rule's documentation (#68)

Release 1.1.0 (#67)

add some mail related outgoing rules

Merge pull request #64 from traylenator/params

Enable parameter_documentation lint

Enable parameter_documentation lint

The linter checks that every parameter has been documented.

While corrections have been made to great many classes some more
complicated examples have been left for now. Should be updated
as the files get touched.

https://github.com/domcleal/puppet-lint-param-docs

Add badges to README

Merge pull request #53 from cernops/allrules_check

Check that all the predefined rules are declared in the all rules acceptance test

Use a separate job file

Merge pull request #59 from cernops/issue58

Align simplerule and rule rulename requirements

Added to tests

Align simplerule and rule rulename requirements

Release 1.0.0 (#49)

• Release 1.0.0

Co-authored-by: duritong <peter.meier+github@immerda.ch>

Use Stdlib::Port everywhere in place of Integer

Use Stdlib::Port in place of Integer for ports

Fixes #37

Update manifests/set.pp

Merge pull request #42 from duritong/terminology

switch not the server naming

Merge pull request #47 from cernops/issue45

Prefix custom tables with custom- so they're loaded