Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / files / config @ 3016d428

Nom Taille Révision Âge Auteur Commentaire
puppet-inet-filter.nft 73 octets baad986e plus d'un an Vadym Chepkov add ftp helper This adds ability to enable a c...

Dernières révisions

# Date Auteur Commentaire
baad986e 2023-11-16 19:10 Vadym Chepkov

add ftp helper

This adds ability to enable a connection tracker helper and provides typical ftp rules

Co-authored-by: Vadym Chepkov <>
Co-authored-by: Yury Bushmelev <>
1a4f336e 2021-02-11 16:42 Gabriel Filion

start declaring the 'global' chain with module resources

the 'global' chain is a vestigial piece of early development on this
module, but it can be useful for creating fast short-circuits like
blocking traffic that match a certain set of IPs.

in the current state we can't inject rules inside the 'global' chain...
fcb1d356 2020-12-10 02:23 Nacho Barrientos

Auto fill simple table configuration
82d10659 2020-11-26 15:39 Nacho Barrientos

Allow disabling default NAT tables and chains
30462da1 2020-11-26 05:19 Steve Traylen

Reload rules atomically

Background: The unit file for nftables on CentOS 8 contains:

```
ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf
ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'
ExecStop=/sbin/nft flush ruleset
```...
79e9a23f 2020-11-21 03:10 Nacho Barrientos

Move ICMP stuff to separate classes
ea96d5db 2020-11-19 10:15 Nacho Barrientos

Move ct rules from global to INPUT and OUTPUT
e4c32222 2020-11-13 09:55 Nacho Barrientos

Use concat for table conf generation

This way other components of the module will be able to add extra stuff
to the table definitions like sets.
e105f149 2020-10-28 14:50 tr

Include table ip6 nat
248ef9d5 2020-10-28 14:40 tr

Add basic ip6 nat chains

Voir les révisions

Formats disponibles : Atom