puppet nftables

#   Adds INPUT and OUTPUT rules to allow traffic that's part of an

#   established connection and also to drop invalid packets.

#

# @param firewalld_enable

#   Configures how the firewalld systemd service unit is enabled. It might be

#   useful to set this to false if you're externaly removing firewalld from

  Boolean $out_icmp              = true,

  Boolean $out_all               = false,

  Boolean $in_out_conntrack      = true,

  Boolean $nat                   = true,

  Hash $rules                    = {},

  Hash $sets                     = {},