root / CHANGELOG.md @ 3e3f3c50
Historique | Voir | Annoter | Télécharger (23,9 ko)
1 | ece9be27 | tr | # Changelog |
---|---|---|---|
2 | |||
3 | All notable changes to this project will be documented in this file. |
||
4 | bc1b0f1a | Steve Traylen | Each new release typically also includes the latest modulesync defaults. |
5 | These should not affect the functionality of the module. |
||
6 | ece9be27 | tr | |
7 | 3e3f3c50 | Tim Meusel | ## [v3.2.0](https://github.com/voxpupuli/puppet-nftables/tree/v3.2.0) (2023-08-19) |
8 | |||
9 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v3.1.0...v3.2.0) |
||
10 | |||
11 | **Implemented enhancements:** |
||
12 | |||
13 | - Add rule for outgoing multicast DNS [\#199](https://github.com/voxpupuli/puppet-nftables/pull/199) ([bastelfreak](https://github.com/bastelfreak)) |
||
14 | - Add rule for multicast listener requests \(MLDv2\) [\#198](https://github.com/voxpupuli/puppet-nftables/pull/198) ([bastelfreak](https://github.com/bastelfreak)) |
||
15 | - Add rules for IGMP [\#194](https://github.com/voxpupuli/puppet-nftables/pull/194) ([bastelfreak](https://github.com/bastelfreak)) |
||
16 | - mDNS: Allow udp port 5353 [\#193](https://github.com/voxpupuli/puppet-nftables/pull/193) ([bastelfreak](https://github.com/bastelfreak)) |
||
17 | - Add rule to allow incoming spotify broadcast [\#192](https://github.com/voxpupuli/puppet-nftables/pull/192) ([bastelfreak](https://github.com/bastelfreak)) |
||
18 | - Add rule to allow multicast DNS [\#191](https://github.com/voxpupuli/puppet-nftables/pull/191) ([bastelfreak](https://github.com/bastelfreak)) |
||
19 | - Add rule to allow incoming multicast traffic [\#190](https://github.com/voxpupuli/puppet-nftables/pull/190) ([bastelfreak](https://github.com/bastelfreak)) |
||
20 | - Declare stdlib v9 support [\#180](https://github.com/voxpupuli/puppet-nftables/pull/180) ([traylenator](https://github.com/traylenator)) |
||
21 | |||
22 | **Fixed bugs:** |
||
23 | |||
24 | - Add missing unit string for timeout,gc-interval [\#187](https://github.com/voxpupuli/puppet-nftables/pull/187) ([javier-angulo](https://github.com/javier-angulo)) |
||
25 | |||
26 | **Merged pull requests:** |
||
27 | |||
28 | - Rewrite mdns rules to limit to multicast and allow IPv6 [\#197](https://github.com/voxpupuli/puppet-nftables/pull/197) ([ekohl](https://github.com/ekohl)) |
||
29 | |||
30 | ## [v3.1.0](https://github.com/voxpupuli/puppet-nftables/tree/v3.1.0) (2023-07-30) |
||
31 | cedfa7db | Tim Meusel | |
32 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v3.0.1...v3.1.0) |
||
33 | |||
34 | **Implemented enhancements:** |
||
35 | |||
36 | - puppetlabs/stdlib: Allow 9.x [\#182](https://github.com/voxpupuli/puppet-nftables/pull/182) ([bastelfreak](https://github.com/bastelfreak)) |
||
37 | - Declare puppet v8 support [\#181](https://github.com/voxpupuli/puppet-nftables/pull/181) ([traylenator](https://github.com/traylenator)) |
||
38 | |||
39 | **Merged pull requests:** |
||
40 | |||
41 | - puppetlabs/concat: Allow 9.x [\#185](https://github.com/voxpupuli/puppet-nftables/pull/185) ([bastelfreak](https://github.com/bastelfreak)) |
||
42 | |||
43 | b09c1fa4 | Simon Hoenscheid | ## [v3.0.1](https://github.com/voxpupuli/puppet-nftables/tree/v3.0.1) (2023-06-20) |
44 | |||
45 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v3.0.0...v3.0.1) |
||
46 | |||
47 | cedfa7db | Tim Meusel | **Implemented enhancements:** |
48 | |||
49 | - add ldap and active directory rules [\#177](https://github.com/voxpupuli/puppet-nftables/pull/177) ([SimonHoenscheid](https://github.com/SimonHoenscheid)) |
||
50 | |||
51 | b09c1fa4 | Simon Hoenscheid | **Closed issues:** |
52 | |||
53 | - rspec tests fail on docker again. [\#167](https://github.com/voxpupuli/puppet-nftables/issues/167) |
||
54 | |||
55 | **Merged pull requests:** |
||
56 | |||
57 | - Increased puppet/systemd upper limit to \< 6.0.0 [\#176](https://github.com/voxpupuli/puppet-nftables/pull/176) ([canihavethisone](https://github.com/canihavethisone)) |
||
58 | |||
59 | ## [v3.0.0](https://github.com/voxpupuli/puppet-nftables/tree/v3.0.0) (2023-05-25) |
||
60 | 84baa533 | Steve Traylen | |
61 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.6.1...v3.0.0) |
||
62 | |||
63 | **Breaking changes:** |
||
64 | |||
65 | - Drop puppet 6 support [\#173](https://github.com/voxpupuli/puppet-nftables/pull/173) ([traylenator](https://github.com/traylenator)) |
||
66 | |||
67 | **Implemented enhancements:** |
||
68 | |||
69 | - Raise puppetlabs/concat upper limit to \< 9.0.0 [\#170](https://github.com/voxpupuli/puppet-nftables/pull/170) ([canihavethisone](https://github.com/canihavethisone)) |
||
70 | |||
71 | **Merged pull requests:** |
||
72 | |||
73 | - Refresh REFERENCE [\#171](https://github.com/voxpupuli/puppet-nftables/pull/171) ([traylenator](https://github.com/traylenator)) |
||
74 | - Fix typo in icinga2 rule documentation [\#169](https://github.com/voxpupuli/puppet-nftables/pull/169) ([baldurmen](https://github.com/baldurmen)) |
||
75 | |||
76 | ## [v2.6.1](https://github.com/voxpupuli/puppet-nftables/tree/v2.6.1) (2023-03-24) |
||
77 | 2f8b600b | Steve Traylen | |
78 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.6.0...v2.6.1) |
||
79 | |||
80 | **Implemented enhancements:** |
||
81 | |||
82 | - Add bridge as a valid family for chain tables [\#165](https://github.com/voxpupuli/puppet-nftables/pull/165) ([luisfdez](https://github.com/luisfdez)) |
||
83 | - Add Rocky 8 and 9 support [\#161](https://github.com/voxpupuli/puppet-nftables/pull/161) ([bastelfreak](https://github.com/bastelfreak)) |
||
84 | - Declare AlmaLinux8 and AlmaLinux9 support [\#160](https://github.com/voxpupuli/puppet-nftables/pull/160) ([nbarrientos](https://github.com/nbarrientos)) |
||
85 | - bump puppet/systemd to \< 5.0.0 [\#159](https://github.com/voxpupuli/puppet-nftables/pull/159) ([jhoblitt](https://github.com/jhoblitt)) |
||
86 | - Allow netdev as table family in defined type nftables::chain [\#149](https://github.com/voxpupuli/puppet-nftables/pull/149) ([hugendudel](https://github.com/hugendudel)) |
||
87 | |||
88 | **Fixed bugs:** |
||
89 | |||
90 | - Align filemode on RedHat to distro default [\#157](https://github.com/voxpupuli/puppet-nftables/pull/157) ([duritong](https://github.com/duritong)) |
||
91 | |||
92 | **Closed issues:** |
||
93 | |||
94 | - failing to setup a basic firewall [\#158](https://github.com/voxpupuli/puppet-nftables/issues/158) |
||
95 | |||
96 | **Merged pull requests:** |
||
97 | |||
98 | - README improvements [\#162](https://github.com/voxpupuli/puppet-nftables/pull/162) ([anarcat](https://github.com/anarcat)) |
||
99 | |||
100 | 61491646 | Tim Meusel | ## [v2.6.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.6.0) (2022-10-25) |
101 | |||
102 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.5.0...v2.6.0) |
||
103 | |||
104 | **Implemented enhancements:** |
||
105 | |||
106 | - Add class for outgoing HKP firewalling [\#153](https://github.com/voxpupuli/puppet-nftables/pull/153) ([bastelfreak](https://github.com/bastelfreak)) |
||
107 | - Add Ubuntu support [\#152](https://github.com/voxpupuli/puppet-nftables/pull/152) ([bastelfreak](https://github.com/bastelfreak)) |
||
108 | - split conntrack management into dedicated classes [\#148](https://github.com/voxpupuli/puppet-nftables/pull/148) ([duritong](https://github.com/duritong)) |
||
109 | - New nftables::file type to include raw file [\#147](https://github.com/voxpupuli/puppet-nftables/pull/147) ([traylenator](https://github.com/traylenator)) |
||
110 | |||
111 | **Closed issues:** |
||
112 | |||
113 | - Add ability to include completely raw files [\#146](https://github.com/voxpupuli/puppet-nftables/issues/146) |
||
114 | - Add support for Debian [\#65](https://github.com/voxpupuli/puppet-nftables/issues/65) |
||
115 | |||
116 | 3b8f5945 | Steve Traylen | ## [v2.5.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.5.0) (2022-08-26) |
117 | |||
118 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.4.0...v2.5.0) |
||
119 | |||
120 | **Implemented enhancements:** |
||
121 | |||
122 | - Add all nftables families as a valid noflush pattern [\#142](https://github.com/voxpupuli/puppet-nftables/pull/142) ([luisfdez](https://github.com/luisfdez)) |
||
123 | |||
124 | **Fixed bugs:** |
||
125 | |||
126 | - Properly escape bridge in rulename [\#144](https://github.com/voxpupuli/puppet-nftables/pull/144) ([duritong](https://github.com/duritong)) |
||
127 | |||
128 | **Closed issues:** |
||
129 | |||
130 | - nftables::bridges creates invalid rule names when bridge devices have multiple IP addresses [\#143](https://github.com/voxpupuli/puppet-nftables/issues/143) |
||
131 | |||
132 | 60f3e2e6 | Tim Meusel | ## [v2.4.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.4.0) (2022-07-11) |
133 | |||
134 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.3.0...v2.4.0) |
||
135 | |||
136 | **Implemented enhancements:** |
||
137 | |||
138 | - Add rule to allow outgoing whois queries [\#140](https://github.com/voxpupuli/puppet-nftables/pull/140) ([bastelfreak](https://github.com/bastelfreak)) |
||
139 | - chrony: Allow filtering for outgoing NTP servers [\#139](https://github.com/voxpupuli/puppet-nftables/pull/139) ([bastelfreak](https://github.com/bastelfreak)) |
||
140 | - Add class for pxp-agent firewalling [\#138](https://github.com/voxpupuli/puppet-nftables/pull/138) ([bastelfreak](https://github.com/bastelfreak)) |
||
141 | |||
142 | 821ec83a | Tim Meusel | ## [v2.3.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.3.0) (2022-07-06) |
143 | |||
144 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.2.1...v2.3.0) |
||
145 | |||
146 | **Implemented enhancements:** |
||
147 | |||
148 | - systemctl: Use relative path [\#136](https://github.com/voxpupuli/puppet-nftables/pull/136) ([bastelfreak](https://github.com/bastelfreak)) |
||
149 | - Add Debian support [\#134](https://github.com/voxpupuli/puppet-nftables/pull/134) ([bastelfreak](https://github.com/bastelfreak)) |
||
150 | - make path to echo configureable [\#133](https://github.com/voxpupuli/puppet-nftables/pull/133) ([bastelfreak](https://github.com/bastelfreak)) |
||
151 | - make path to `nft` binary configureable [\#132](https://github.com/voxpupuli/puppet-nftables/pull/132) ([bastelfreak](https://github.com/bastelfreak)) |
||
152 | |||
153 | ## [v2.2.1](https://github.com/voxpupuli/puppet-nftables/tree/v2.2.1) (2022-05-02) |
||
154 | f4dcddd6 | Nacho Barrientos | |
155 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.2.0...v2.2.1) |
||
156 | |||
157 | **Merged pull requests:** |
||
158 | |||
159 | - rspec mock systemd process on docker [\#128](https://github.com/voxpupuli/puppet-nftables/pull/128) ([traylenator](https://github.com/traylenator)) |
||
160 | |||
161 | d0a1ffef | hashworks | ## [v2.2.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.2.0) (2022-02-27) |
162 | |||
163 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.1.0...v2.2.0) |
||
164 | |||
165 | **Implemented enhancements:** |
||
166 | |||
167 | - Add support for Arch Linux [\#124](https://github.com/voxpupuli/puppet-nftables/pull/124) ([hashworks](https://github.com/hashworks)) |
||
168 | - Declare support for RHEL9, CentOS9 and OL9 [\#120](https://github.com/voxpupuli/puppet-nftables/pull/120) ([nbarrientos](https://github.com/nbarrientos)) |
||
169 | - Rubocop corrections for rubocop 1.22.3 [\#118](https://github.com/voxpupuli/puppet-nftables/pull/118) ([traylenator](https://github.com/traylenator)) |
||
170 | - Use protocol number instead of label [\#112](https://github.com/voxpupuli/puppet-nftables/pull/112) ([keachi](https://github.com/keachi)) |
||
171 | |||
172 | **Fixed bugs:** |
||
173 | |||
174 | - Ensure that nftables.service remains active after it exits [\#125](https://github.com/voxpupuli/puppet-nftables/pull/125) ([hashworks](https://github.com/hashworks)) |
||
175 | |||
176 | **Merged pull requests:** |
||
177 | |||
178 | - Fix typos in initial reference examples [\#122](https://github.com/voxpupuli/puppet-nftables/pull/122) ([hashworks](https://github.com/hashworks)) |
||
179 | |||
180 | b02d6ea9 | Nacho Barrientos | ## [v2.1.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.1.0) (2021-09-14) |
181 | |||
182 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v2.0.0...v2.1.0) |
||
183 | |||
184 | **Implemented enhancements:** |
||
185 | |||
186 | - nftables::set can only be assigned to 1 table [\#100](https://github.com/voxpupuli/puppet-nftables/issues/100) |
||
187 | - support a different table name for 'nat' [\#107](https://github.com/voxpupuli/puppet-nftables/pull/107) ([figless](https://github.com/figless)) |
||
188 | - Allow declaring the same set in several tables [\#102](https://github.com/voxpupuli/puppet-nftables/pull/102) ([nbarrientos](https://github.com/nbarrientos)) |
||
189 | |||
190 | **Fixed bugs:** |
||
191 | |||
192 | - fix datatype for $table and $dport [\#104](https://github.com/voxpupuli/puppet-nftables/pull/104) ([bastelfreak](https://github.com/bastelfreak)) |
||
193 | |||
194 | **Merged pull requests:** |
||
195 | |||
196 | - Allow stdlib 8.0.0 [\#106](https://github.com/voxpupuli/puppet-nftables/pull/106) ([smortex](https://github.com/smortex)) |
||
197 | - switch from camptocamp/systemd to voxpupuli/systemd [\#103](https://github.com/voxpupuli/puppet-nftables/pull/103) ([bastelfreak](https://github.com/bastelfreak)) |
||
198 | - pull fixtures from git and not forge [\#99](https://github.com/voxpupuli/puppet-nftables/pull/99) ([bastelfreak](https://github.com/bastelfreak)) |
||
199 | |||
200 | ## [v2.0.0](https://github.com/voxpupuli/puppet-nftables/tree/v2.0.0) (2021-06-03) |
||
201 | 683d1049 | Nacho Barrientos | |
202 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.3.0...v2.0.0) |
||
203 | |||
204 | **Breaking changes:** |
||
205 | |||
206 | - Drop Puppet 5, puppetlabs/concat 7.x, puppetlabs/stdlib 7.x, camptocamp/systemd: 3.x [\#92](https://github.com/voxpupuli/puppet-nftables/pull/92) ([traylenator](https://github.com/traylenator)) |
||
207 | - Drop Puppet 5 support [\#79](https://github.com/voxpupuli/puppet-nftables/pull/79) ([kenyon](https://github.com/kenyon)) |
||
208 | |||
209 | **Implemented enhancements:** |
||
210 | |||
211 | - Ability to set base chains [\#95](https://github.com/voxpupuli/puppet-nftables/issues/95) |
||
212 | - puppetlabs/concat: Allow 7.x [\#91](https://github.com/voxpupuli/puppet-nftables/pull/91) ([bastelfreak](https://github.com/bastelfreak)) |
||
213 | - puppetlabs/stdlib: Allow 7.x [\#90](https://github.com/voxpupuli/puppet-nftables/pull/90) ([bastelfreak](https://github.com/bastelfreak)) |
||
214 | - camptocamp/systemd: allow 3.x [\#89](https://github.com/voxpupuli/puppet-nftables/pull/89) ([bastelfreak](https://github.com/bastelfreak)) |
||
215 | |||
216 | **Fixed bugs:** |
||
217 | |||
218 | - Fix IPv4 source address type detection [\#93](https://github.com/voxpupuli/puppet-nftables/pull/93) ([nbarrientos](https://github.com/nbarrientos)) |
||
219 | |||
220 | **Closed issues:** |
||
221 | |||
222 | - Class\[Nftables::Bridges\]\['bridgenames'\] contains a Regexp value. It will be converted to the String '/^br.+/' [\#83](https://github.com/voxpupuli/puppet-nftables/issues/83) |
||
223 | |||
224 | **Merged pull requests:** |
||
225 | |||
226 | - Allow creating a totally empty firewall [\#96](https://github.com/voxpupuli/puppet-nftables/pull/96) ([nbarrientos](https://github.com/nbarrientos)) |
||
227 | - Amend link to Yasnippets [\#88](https://github.com/voxpupuli/puppet-nftables/pull/88) ([nbarrientos](https://github.com/nbarrientos)) |
||
228 | |||
229 | 804b96e4 | Nacho Barrientos | ## [v1.3.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.3.0) (2021-03-25) |
230 | |||
231 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.2.0...v1.3.0) |
||
232 | |||
233 | **Implemented enhancements:** |
||
234 | |||
235 | - Add rules for QEMU/libvirt guests \(bridged virtual networking\) [\#85](https://github.com/voxpupuli/puppet-nftables/pull/85) ([nbarrientos](https://github.com/nbarrientos)) |
||
236 | - Add nftables.version to structured fact. [\#84](https://github.com/voxpupuli/puppet-nftables/pull/84) ([traylenator](https://github.com/traylenator)) |
||
237 | - Add rules for Apache ActiveMQ [\#82](https://github.com/voxpupuli/puppet-nftables/pull/82) ([nbarrientos](https://github.com/nbarrientos)) |
||
238 | - Add Docker-CE default rules [\#80](https://github.com/voxpupuli/puppet-nftables/pull/80) ([luisfdez](https://github.com/luisfdez)) |
||
239 | |||
240 | b02d6ea9 | Nacho Barrientos | **Closed issues:** |
241 | |||
242 | - Increase puppetlabs/concat version in metadata [\#78](https://github.com/voxpupuli/puppet-nftables/issues/78) |
||
243 | |||
244 | 804b96e4 | Nacho Barrientos | **Merged pull requests:** |
245 | |||
246 | - Fix sections and add a pointer to code snippets for Emacs [\#81](https://github.com/voxpupuli/puppet-nftables/pull/81) ([nbarrientos](https://github.com/nbarrientos)) |
||
247 | |||
248 | ## [v1.2.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.2.0) (2021-03-03) |
||
249 | 05c7f19d | Steve Traylen | |
250 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.1.1...v1.2.0) |
||
251 | |||
252 | **Implemented enhancements:** |
||
253 | |||
254 | - start declaring the 'global' chain with module resources [\#73](https://github.com/voxpupuli/puppet-nftables/pull/73) ([lelutin](https://github.com/lelutin)) |
||
255 | |||
256 | **Fixed bugs:** |
||
257 | |||
258 | - nftables service is broken after reboot [\#74](https://github.com/voxpupuli/puppet-nftables/issues/74) |
||
259 | - fix \#74 - ensure table are initialized before flushing them [\#75](https://github.com/voxpupuli/puppet-nftables/pull/75) ([duritong](https://github.com/duritong)) |
||
260 | |||
261 | bd0d7998 | Steve Traylen | ## [v1.1.1](https://github.com/voxpupuli/puppet-nftables/tree/v1.1.1) (2021-01-29) |
262 | |||
263 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.1.0...v1.1.1) |
||
264 | |||
265 | **Fixed bugs:** |
||
266 | |||
267 | - Simplerule: wrong IP protocol version filter statement for IPv6 traffic [\#69](https://github.com/voxpupuli/puppet-nftables/issues/69) |
||
268 | - Fix IP version filter for IPv6 traffic [\#70](https://github.com/voxpupuli/puppet-nftables/pull/70) ([nbarrientos](https://github.com/nbarrientos)) |
||
269 | |||
270 | **Merged pull requests:** |
||
271 | |||
272 | - Improve nftables::rule's documentation [\#68](https://github.com/voxpupuli/puppet-nftables/pull/68) ([nbarrientos](https://github.com/nbarrientos)) |
||
273 | |||
274 | afc4dd16 | Steve Traylen | ## [v1.1.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.1.0) (2021-01-25) |
275 | |||
276 | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/v1.0.0...v1.1.0) |
||
277 | |||
278 | **Implemented enhancements:** |
||
279 | |||
280 | - Enable parameter\_documentation lint [\#64](https://github.com/voxpupuli/puppet-nftables/pull/64) ([traylenator](https://github.com/traylenator)) |
||
281 | - Add Samba in rules [\#62](https://github.com/voxpupuli/puppet-nftables/pull/62) ([glpatcern](https://github.com/glpatcern)) |
||
282 | - Add some mail related outgoing rules [\#60](https://github.com/voxpupuli/puppet-nftables/pull/60) ([duritong](https://github.com/duritong)) |
||
283 | |||
284 | **Fixed bugs:** |
||
285 | |||
286 | - nftables::simplerule should follow the same rules as nftables::rule [\#58](https://github.com/voxpupuli/puppet-nftables/issues/58) |
||
287 | - Align simplerule and rule rulename requirements [\#59](https://github.com/voxpupuli/puppet-nftables/pull/59) ([nbarrientos](https://github.com/nbarrientos)) |
||
288 | |||
289 | **Closed issues:** |
||
290 | |||
291 | - Get it under the voxpupuli umbrella [\#35](https://github.com/voxpupuli/puppet-nftables/issues/35) |
||
292 | |||
293 | **Merged pull requests:** |
||
294 | |||
295 | - Add badges to README [\#63](https://github.com/voxpupuli/puppet-nftables/pull/63) ([traylenator](https://github.com/traylenator)) |
||
296 | - Check that all the predefined rules are declared in the all rules acceptance test [\#53](https://github.com/voxpupuli/puppet-nftables/pull/53) ([nbarrientos](https://github.com/nbarrientos)) |
||
297 | |||
298 | bc1b0f1a | Steve Traylen | ## [v1.0.0](https://github.com/voxpupuli/puppet-nftables/tree/v1.0.0) (2020-12-15) |
299 | ece9be27 | tr | |
300 | bc1b0f1a | Steve Traylen | [Full Changelog](https://github.com/voxpupuli/puppet-nftables/compare/0ba57c66a35ed4e9b570d8a6315a33a1c4ba3181...v1.0.0) |
301 | ece9be27 | tr | |
302 | bc1b0f1a | Steve Traylen | **Breaking changes:** |
303 | ece9be27 | tr | |
304 | bc1b0f1a | Steve Traylen | - switch the server naming [\#42](https://github.com/voxpupuli/puppet-nftables/pull/42) ([duritong](https://github.com/duritong)) |
305 | |||
306 | **Implemented enhancements:** |
||
307 | |||
308 | - Use Stdlib::Port everywhere in place of Integer [\#56](https://github.com/voxpupuli/puppet-nftables/pull/56) ([traylenator](https://github.com/traylenator)) |
||
309 | - Enable Puppet 7 support [\#51](https://github.com/voxpupuli/puppet-nftables/pull/51) ([bastelfreak](https://github.com/bastelfreak)) |
||
310 | - Several fixes for nftables::config [\#48](https://github.com/voxpupuli/puppet-nftables/pull/48) ([nbarrientos](https://github.com/nbarrientos)) |
||
311 | - rubocop corrections [\#41](https://github.com/voxpupuli/puppet-nftables/pull/41) ([traylenator](https://github.com/traylenator)) |
||
312 | - Add basic configuration validation acceptance test [\#38](https://github.com/voxpupuli/puppet-nftables/pull/38) ([traylenator](https://github.com/traylenator)) |
||
313 | - Remove duplicate flush on reload [\#34](https://github.com/voxpupuli/puppet-nftables/pull/34) ([traylenator](https://github.com/traylenator)) |
||
314 | - Add nftables::simplerule [\#33](https://github.com/voxpupuli/puppet-nftables/pull/33) ([nbarrientos](https://github.com/nbarrientos)) |
||
315 | - Add Ceph and NFS rules [\#32](https://github.com/voxpupuli/puppet-nftables/pull/32) ([dvanders](https://github.com/dvanders)) |
||
316 | - New parameter noflush\_tables to selectivly skip flush [\#31](https://github.com/voxpupuli/puppet-nftables/pull/31) ([traylenator](https://github.com/traylenator)) |
||
317 | - Scientific Linux 8 will never exist [\#30](https://github.com/voxpupuli/puppet-nftables/pull/30) ([traylenator](https://github.com/traylenator)) |
||
318 | - Enable conntrack in FORWARD [\#29](https://github.com/voxpupuli/puppet-nftables/pull/29) ([keachi](https://github.com/keachi)) |
||
319 | - Do not test nftables::rules repeatadly [\#28](https://github.com/voxpupuli/puppet-nftables/pull/28) ([traylenator](https://github.com/traylenator)) |
||
320 | - Allow sourcing sets from Hiera [\#26](https://github.com/voxpupuli/puppet-nftables/pull/26) ([nbarrientos](https://github.com/nbarrientos)) |
||
321 | - Allow disabling default NAT tables and chains [\#25](https://github.com/voxpupuli/puppet-nftables/pull/25) ([nbarrientos](https://github.com/nbarrientos)) |
||
322 | - Set a customisable rate limit to the logging rules [\#22](https://github.com/voxpupuli/puppet-nftables/pull/22) ([nbarrientos](https://github.com/nbarrientos)) |
||
323 | - Make masking Service\['firewalld'\] optional [\#20](https://github.com/voxpupuli/puppet-nftables/pull/20) ([nbarrientos](https://github.com/nbarrientos)) |
||
324 | - Move ICMP stuff to separate classes allowing better customisation [\#16](https://github.com/voxpupuli/puppet-nftables/pull/16) ([nbarrientos](https://github.com/nbarrientos)) |
||
325 | - Move conntrack rules from global to INPUT and OUTPUT [\#14](https://github.com/voxpupuli/puppet-nftables/pull/14) ([nbarrientos](https://github.com/nbarrientos)) |
||
326 | - Add comments for all the nftable::rules entries [\#13](https://github.com/voxpupuli/puppet-nftables/pull/13) ([traylenator](https://github.com/traylenator)) |
||
327 | - Allow tables to add comments to $log\_prefix [\#12](https://github.com/voxpupuli/puppet-nftables/pull/12) ([nbarrientos](https://github.com/nbarrientos)) |
||
328 | - Reload rules atomically and verify rules before deploy [\#10](https://github.com/voxpupuli/puppet-nftables/pull/10) ([traylenator](https://github.com/traylenator)) |
||
329 | - Allow raw sets and dashes in set names [\#8](https://github.com/voxpupuli/puppet-nftables/pull/8) ([nbarrientos](https://github.com/nbarrientos)) |
||
330 | - Add a parameter to control the fate of discarded traffic [\#7](https://github.com/voxpupuli/puppet-nftables/pull/7) ([nbarrientos](https://github.com/nbarrientos)) |
||
331 | - Add rules for afs3\_callback in and out rules for kerberos and openafs. [\#6](https://github.com/voxpupuli/puppet-nftables/pull/6) ([traylenator](https://github.com/traylenator)) |
||
332 | - Allow customising the log prefix [\#5](https://github.com/voxpupuli/puppet-nftables/pull/5) ([nbarrientos](https://github.com/nbarrientos)) |
||
333 | - Add classes encapsulating rules for DHCPv6 client traffic \(in/out\) [\#4](https://github.com/voxpupuli/puppet-nftables/pull/4) ([nbarrientos](https://github.com/nbarrientos)) |
||
334 | - Add support for named sets [\#3](https://github.com/voxpupuli/puppet-nftables/pull/3) ([nbarrientos](https://github.com/nbarrientos)) |
||
335 | - New parameter out\_all, default false [\#1](https://github.com/voxpupuli/puppet-nftables/pull/1) ([traylenator](https://github.com/traylenator)) |
||
336 | |||
337 | **Fixed bugs:** |
||
338 | |||
339 | - Correct nfs3 invalid udp /tcp matching rule and more tests [\#50](https://github.com/voxpupuli/puppet-nftables/pull/50) ([traylenator](https://github.com/traylenator)) |
||
340 | - Prefix custom tables with custom- so they're loaded [\#47](https://github.com/voxpupuli/puppet-nftables/pull/47) ([nbarrientos](https://github.com/nbarrientos)) |
||
341 | - Correct bad merge [\#15](https://github.com/voxpupuli/puppet-nftables/pull/15) ([traylenator](https://github.com/traylenator)) |
||
342 | |||
343 | **Closed issues:** |
||
344 | |||
345 | - deploying custom tables is broken [\#45](https://github.com/voxpupuli/puppet-nftables/issues/45) |
||
346 | - Switch to Stdlib::Port everywhere [\#37](https://github.com/voxpupuli/puppet-nftables/issues/37) |
||
347 | - Add set definition from Hiera [\#24](https://github.com/voxpupuli/puppet-nftables/issues/24) |
||
348 | - Add an option to disable NAT [\#23](https://github.com/voxpupuli/puppet-nftables/issues/23) |
||
349 | - Add an option to limit the rate of logged messages [\#19](https://github.com/voxpupuli/puppet-nftables/issues/19) |
||
350 | - Rule API [\#17](https://github.com/voxpupuli/puppet-nftables/issues/17) |
||
351 | - Publish to forge.puppet.com [\#11](https://github.com/voxpupuli/puppet-nftables/issues/11) |
||
352 | - The global chain contains INPUT specific rules [\#9](https://github.com/voxpupuli/puppet-nftables/issues/9) |
||
353 | - The fate of forbidden packets should be configurable [\#2](https://github.com/voxpupuli/puppet-nftables/issues/2) |
||
354 | |||
355 | **Merged pull requests:** |
||
356 | |||
357 | - Docs for nftables::set [\#55](https://github.com/voxpupuli/puppet-nftables/pull/55) ([traylenator](https://github.com/traylenator)) |
||
358 | - Remove a blank separating the doc string and the code [\#52](https://github.com/voxpupuli/puppet-nftables/pull/52) ([nbarrientos](https://github.com/nbarrientos)) |
||
359 | afc4dd16 | Steve Traylen | - Release 1.0.0 [\#49](https://github.com/voxpupuli/puppet-nftables/pull/49) ([traylenator](https://github.com/traylenator)) |
360 | bc1b0f1a | Steve Traylen | - Correct layout of ignore table example [\#44](https://github.com/voxpupuli/puppet-nftables/pull/44) ([traylenator](https://github.com/traylenator)) |
361 | - Fix typos and formatting in the README [\#43](https://github.com/voxpupuli/puppet-nftables/pull/43) ([nbarrientos](https://github.com/nbarrientos)) |
||
362 | - Comment why firewalld\_enable parameter is required [\#40](https://github.com/voxpupuli/puppet-nftables/pull/40) ([traylenator](https://github.com/traylenator)) |
||
363 | - modulesync 4.0.0 [\#36](https://github.com/voxpupuli/puppet-nftables/pull/36) ([traylenator](https://github.com/traylenator)) |
||
364 | - Refresh REFERENCE [\#27](https://github.com/voxpupuli/puppet-nftables/pull/27) ([traylenator](https://github.com/traylenator)) |
||
365 | |||
366 | |||
367 | |||
368 | \* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)* |