puppet nftables

Release 3.1.0

puppetlabs/concat: Allow 9.x

puppetlabs/stdlib: Allow 9.x

Declare puppet v8 support

Merge pull request #179 from SimonHoenscheid/release-3.0.1

Release 3.0.1

Merge pull request #177 from SimonHoenscheid/ldap_ad_out_rulesets

add ldap and active directory rules

Merge pull request #176 from canihavethisone/master

Increased puppet/systemd upper limit to < 6.0.0

[blacksmith] Bump version to 3.0.1-rc0

Release 3.0.0

Merge pull request #173 from traylenator/dropp6

Drop puppet 6 support

modulesync 6.0.0

Raise puppetlabs/concat upper limit to < 9.0.0

Refresh REFERENCE

Fix typo in icinga2 rule documentation

modulesync 5.5.0

Merge pull request #166 from voxpupuli/rel/261

Release 2.6.1

Merge pull request #165 from luisfdez/feat/bridge-chain

Add bridge as a valid family for chain tables

Add bridge as a valid family for chain tables

fix nft sample command

I don't know what the nfc command is, but it certainly looks like a
typo. Also, the flag to include a directory is `-I` here, not `-L`.

add basic usage instructions right at the top

I couldn't figure out how to use this module when I looked at the
README. It was quickly going into pretty arcane stuff like "inet
filter" and "ip nat table" which might make sense for the module
authors or people used to nftables/iptables, but are pretty...

Add Rocky 8 and 9 support

Merge pull request #149 from hugendudel/netdev_support

Allow netdev as table family in defined type nftables::chain

Declare AlmaLinux8 and AlmaLinux9 support

bump puppet/systemd to < 5.0.0

Align filemode on RedHat to distro default

The RPM acutally ships the configuration and directory with
0600/0700 while this module sets the mode to 0640/0750.

However, this has the drawback that on new nftables RPM versions,
we are setting it back to the modules mode and triggering an nft...

modulesync 5.4.0

Merge pull request #154 from bastelfreak/rel260

Release 2.6.0

Merge pull request #153 from bastelfreak/hkp

Add class for outgoing HKP firewalling

Merge pull request #152 from bastelfreak/ubuntu

Add Ubuntu support

Merge pull request #151 from voxpupuli/modulesync

modulesync 5.3.0

Allow netdev as table family in defined type nftables::chain

split conntrack management into dedicated classes so they get consumeable

New nftables::file type to include raw file

For example:

```puppet
nftables::file{'geoip':
content => "include \"/files/geoipsets/dbip/*.ipv4\"\n",
}
```

will right a file or content into the nftables configuration.

The file written will be included in configuration....

Merge pull request #145 from voxpupuli/rel250

Release 2.5.0

Merge pull request #144 from duritong/fix-143-properly-escape-rulename

Properly escape bridge in rulename

fix #143 - properly escape rulename for interfaces

Add all families as a valid noflush pattern

nftables has more valid families than the ones currently accepted by the
module.

This patch adds support for all the families currently supported as per
the documentation at:
https://wiki.nftables.org/wiki-nftables/index.php/Nftables_families

Merge pull request #141 from bastelfreak/rel240

Release 2.4.0

Merge pull request #139 from bastelfreak/ntp

chrony: Allow filtering for outgoing NTP servers

Merge pull request #140 from bastelfreak/whois

Add rule to allow outgoing whois queries

Merge pull request #138 from bastelfreak/pxp

Add class for pxp-agent firewalling

Add class for outgoing PXP connections

[blacksmith] Bump version to 2.3.1-rc0

Release 2.3.0

Add Debian support

systemctl: Use relative path

make path to echo configureable

make path to `nft` binary configureable

Prepare next release candidate

Prepare release 2.2.1