Projet

Général

Profil

Révision 020842af

ID020842af801e7995873b95187039e41ff180a3ef
Parent e1a299d6
Enfant 68824413

Ajouté par Tim Meusel il y a presque 2 ans

Add rules for IGMP

Voir les différences:

REFERENCE.md
24 24
* [`nftables::rules::https`](#nftables--rules--https): manage in https
25 25
* [`nftables::rules::icinga2`](#nftables--rules--icinga2): manage in icinga2
26 26
* [`nftables::rules::icmp`](#nftables--rules--icmp)
27
* [`nftables::rules::igmp`](#nftables--rules--igmp): allow incoming IGMP messages
27 28
* [`nftables::rules::ldap`](#nftables--rules--ldap): manage in ldap
28 29
* [`nftables::rules::mdns`](#nftables--rules--mdns): allow incoming multicast DNS
29 30
* [`nftables::rules::multicast`](#nftables--rules--multicast): allow incoming multicast traffic
......
46 47
* [`nftables::rules::out::http`](#nftables--rules--out--http): manage out http
47 48
* [`nftables::rules::out::https`](#nftables--rules--out--https): manage out https
48 49
* [`nftables::rules::out::icmp`](#nftables--rules--out--icmp): control outbound icmp packages
50
* [`nftables::rules::out::igmp`](#nftables--rules--out--igmp): allow outcoming IGMP messages
49 51
* [`nftables::rules::out::imap`](#nftables--rules--out--imap): allow outgoing imap
50 52
* [`nftables::rules::out::kerberos`](#nftables--rules--out--kerberos): allows outbound access for kerberos
51 53
* [`nftables::rules::out::ldap`](#nftables--rules--out--ldap): manage outgoing ldap
......
629 631

  
630 632
Default value: `'10'`
631 633

  
634
### <a name="nftables--rules--igmp"></a>`nftables::rules::igmp`
635

  
636
allow incoming IGMP messages
637

  
632 638
### <a name="nftables--rules--ldap"></a>`nftables::rules::ldap`
633 639

  
634 640
manage in ldap
......
840 846

  
841 847
Default value: `'10'`
842 848

  
849
### <a name="nftables--rules--out--igmp"></a>`nftables::rules::out::igmp`
850

  
851
allow outcoming IGMP messages
852

  
843 853
### <a name="nftables--rules--out--imap"></a>`nftables::rules::out::imap`
844 854

  
845 855
allow outgoing imap
manifests/rules/igmp.pp
1
#
2
# @summary allow incoming IGMP messages
3
#
4
class nftables::rules::igmp {
5
  nftables::rule { 'default_in-igmp':
6
    content => 'ip daddr 224.0.0.22 accept',
7
  }
8
}
manifests/rules/out/igmp.pp
1
#
2
# @summary allow outgoing IGMP messages
3
#
4
class nftables::rules::out::igmp {
5
  nftables::rule { 'default_out-igmp':
6
    content => 'ip daddr 224.0.0.22 accept',
7
  }
8
}
spec/acceptance/all_rules_spec.rb
87 87
      include nftables::rules::multicast
88 88
      include nftables::rules::spotify
89 89
      include nftables::rules::mdns
90
      include nftables::rules::igmp
91
      include nftables::rules::out::igmp
90 92
      include nftables::services::dhcpv6_client
91 93
      include nftables::services::openafs_client
92 94
      nftables::set{'my_test_set':

Formats disponibles : Unified diff