Projet

Général

Profil

Révision 1fd3f550

ID1fd3f550bbaa37df212c74f82e3085afc7c35347
Parent 0b5de65a
Enfant 500ffee8

Ajouté par Luis Fernández Álvarez il y a presque 3 ans

Add all families as a valid noflush pattern

nftables has more valid families than the ones currently accepted by the
module.

This patch adds support for all the families currently supported as per
the documentation at:
https://wiki.nftables.org/wiki-nftables/index.php/Nftables_families

Voir les différences:

manifests/init.pp
116 116
  Variant[Boolean[false], String] $log_limit = '3/minute burst 5 packets',
117 117
  Variant[Boolean[false], Pattern[/icmp(v6|x)? type .+|tcp reset/]] $reject_with = 'icmpx type port-unreachable',
118 118
  Variant[Boolean[false], Enum['mask']] $firewalld_enable = 'mask',
119
  Optional[Array[Pattern[/^(ip|ip6|inet)-[-a-zA-Z0-9_]+$/],1]] $noflush_tables = undef,
119
  Optional[Array[Pattern[/^(ip|ip6|inet|arp|bridge|netdev)-[-a-zA-Z0-9_]+$/],1]] $noflush_tables = undef,
120 120
  Stdlib::Unixpath $echo,
121 121
  Stdlib::Unixpath $configuration_path,
122 122
  Stdlib::Unixpath $nft_path,

Formats disponibles : Unified diff