puppet nftables

Add nftables rules for ws-discovery

Add rule for incoming SSDP

init.pp: disable check_unsafe_interpolations

[blacksmith] Bump version to 3.2.1-rc0

Release 3.2.0

Add rule for outgoing multicast DNS

Add rule for multicast listener requests (MLDv2)

Rewrite mdns rules to limit to multicast and allow IPv6

This limits the mdns listener to only listen on multicast addresses with
port 5353. One rule for IPv4 and one for IPv6, each controllable with a
parameter.

The generic 5353 to 5353 rule is dropped since it's redundant when I...

Regenerate REFERENCE.md

Merge pull request #194 from bastelfreak/multicast

Add rules for IGMP

Merge pull request #193 from bastelfreak/mdns

mDNS: Allow udp port 5353

mDNS: Allow udp port 5353

Add rule to allow multicast DNS

Add rule to allow incoming spotify broadcast

Add rule to allow incoming multicast traffic

change parameters order: required before optional

fix #184: Add unit string for timeout,gc-interval

Merge pull request #186 from bastelfreak/rel310

Release 3.1.0

Merge pull request #185 from bastelfreak/concat

puppetlabs/concat: Allow 9.x

Merge pull request #182 from voxpupuli/stdlib9_20230723

Declare stdlib v9 support

Declare puppet v8 support

Merge pull request #179 from SimonHoenscheid/release-3.0.1

Release 3.0.1

Merge pull request #177 from SimonHoenscheid/ldap_ad_out_rulesets

add ldap and active directory rules

Merge pull request #176 from canihavethisone/master

Increased puppet/systemd upper limit to < 6.0.0

[blacksmith] Bump version to 3.0.1-rc0

Release 3.0.0

Merge pull request #173 from traylenator/dropp6

Drop puppet 6 support

modulesync 6.0.0

Raise puppetlabs/concat upper limit to < 9.0.0

Refresh REFERENCE

Fix typo in icinga2 rule documentation

modulesync 5.5.0

Merge pull request #166 from voxpupuli/rel/261

Release 2.6.1

Merge pull request #165 from luisfdez/feat/bridge-chain

Add bridge as a valid family for chain tables

Add bridge as a valid family for chain tables

fix nft sample command

I don't know what the nfc command is, but it certainly looks like a
typo. Also, the flag to include a directory is `-I` here, not `-L`.

add basic usage instructions right at the top

I couldn't figure out how to use this module when I looked at the
README. It was quickly going into pretty arcane stuff like "inet
filter" and "ip nat table" which might make sense for the module
authors or people used to nftables/iptables, but are pretty...

Add Rocky 8 and 9 support

Merge pull request #149 from hugendudel/netdev_support

Allow netdev as table family in defined type nftables::chain

Declare AlmaLinux8 and AlmaLinux9 support

bump puppet/systemd to < 5.0.0

Align filemode on RedHat to distro default

The RPM acutally ships the configuration and directory with
0600/0700 while this module sets the mode to 0640/0750.

However, this has the drawback that on new nftables RPM versions,
we are setting it back to the modules mode and triggering an nft...

modulesync 5.4.0

Merge pull request #154 from bastelfreak/rel260

Release 2.6.0

Merge pull request #153 from bastelfreak/hkp

Add class for outgoing HKP firewalling

Merge pull request #152 from bastelfreak/ubuntu

Add Ubuntu support

Merge pull request #151 from voxpupuli/modulesync

modulesync 5.3.0

Allow netdev as table family in defined type nftables::chain

split conntrack management into dedicated classes so they get consumeable