Révision 1fd3f550
Add all families as a valid noflush pattern
nftables has more valid families than the ones currently accepted by the
module.
This patch adds support for all the families currently supported as per
the documentation at:
https://wiki.nftables.org/wiki-nftables/index.php/Nftables_families
manifests/init.pp | ||
---|---|---|
116 | 116 |
Variant[Boolean[false], String] $log_limit = '3/minute burst 5 packets', |
117 | 117 |
Variant[Boolean[false], Pattern[/icmp(v6|x)? type .+|tcp reset/]] $reject_with = 'icmpx type port-unreachable', |
118 | 118 |
Variant[Boolean[false], Enum['mask']] $firewalld_enable = 'mask', |
119 |
Optional[Array[Pattern[/^(ip|ip6|inet)-[-a-zA-Z0-9_]+$/],1]] $noflush_tables = undef, |
|
119 |
Optional[Array[Pattern[/^(ip|ip6|inet|arp|bridge|netdev)-[-a-zA-Z0-9_]+$/],1]] $noflush_tables = undef,
|
|
120 | 120 |
Stdlib::Unixpath $echo, |
121 | 121 |
Stdlib::Unixpath $configuration_path, |
122 | 122 |
Stdlib::Unixpath $nft_path, |
Formats disponibles : Unified diff