Révision 4d63adda
Refresh REFERENCE
REFERENCE.md | ||
---|---|---|
66 | 66 |
* [`nftables::rules::masquerade`](#nftablesrulesmasquerade): masquerade all outgoing traffic |
67 | 67 |
* [`nftables::rules::snat4`](#nftablesrulessnat4): manage a ipv4 snat rule |
68 | 68 |
* [`nftables::set`](#nftablesset): manage a named set |
69 |
* [`nftables::simplerule`](#nftablessimplerule) |
|
70 |
|
|
71 |
### Data types |
|
72 |
|
|
73 |
* [`Nftables::Addr`](#nftablesaddr): Represents an address expression to be used within a rule. |
|
74 |
* [`Nftables::Addr::Set`](#nftablesaddrset): Represents a set expression to be used within a rule. |
|
75 |
* [`Nftables::Port`](#nftablesport): Represents a port expression to be used within a rule. |
|
76 |
* [`Nftables::Port::Range`](#nftablesportrange): Represents a port range expression to be used within a rule. |
|
69 | 77 |
|
70 | 78 |
## Classes |
71 | 79 |
|
... | ... | |
1215 | 1223 |
|
1216 | 1224 |
Default value: ``undef`` |
1217 | 1225 |
|
1226 |
### `nftables::simplerule` |
|
1227 |
|
|
1228 |
The nftables::simplerule class. |
|
1229 |
|
|
1230 |
#### Parameters |
|
1231 |
|
|
1232 |
The following parameters are available in the `nftables::simplerule` defined type. |
|
1233 |
|
|
1234 |
##### `ensure` |
|
1235 |
|
|
1236 |
Data type: `Enum['present','absent']` |
|
1237 |
|
|
1238 |
|
|
1239 |
|
|
1240 |
Default value: `'present'` |
|
1241 |
|
|
1242 |
##### `rulename` |
|
1243 |
|
|
1244 |
Data type: `Pattern[/^[-a-zA-Z0-9_]+$/]` |
|
1245 |
|
|
1246 |
|
|
1247 |
|
|
1248 |
Default value: `$title` |
|
1249 |
|
|
1250 |
##### `order` |
|
1251 |
|
|
1252 |
Data type: `Pattern[/^\d\d$/]` |
|
1253 |
|
|
1254 |
|
|
1255 |
|
|
1256 |
Default value: `'50'` |
|
1257 |
|
|
1258 |
##### `chain` |
|
1259 |
|
|
1260 |
Data type: `String` |
|
1261 |
|
|
1262 |
|
|
1263 |
|
|
1264 |
Default value: `'default_in'` |
|
1265 |
|
|
1266 |
##### `table` |
|
1267 |
|
|
1268 |
Data type: `String` |
|
1269 |
|
|
1270 |
|
|
1271 |
|
|
1272 |
Default value: `'inet-filter'` |
|
1273 |
|
|
1274 |
##### `action` |
|
1275 |
|
|
1276 |
Data type: `Enum['accept', 'continue', 'drop', 'queue', 'return']` |
|
1277 |
|
|
1278 |
|
|
1279 |
|
|
1280 |
Default value: `'accept'` |
|
1281 |
|
|
1282 |
##### `comment` |
|
1283 |
|
|
1284 |
Data type: `Optional[String]` |
|
1285 |
|
|
1286 |
|
|
1287 |
|
|
1288 |
Default value: ``undef`` |
|
1289 |
|
|
1290 |
##### `dport` |
|
1291 |
|
|
1292 |
Data type: `Optional[Nftables::Port]` |
|
1293 |
|
|
1294 |
|
|
1295 |
|
|
1296 |
Default value: ``undef`` |
|
1297 |
|
|
1298 |
##### `proto` |
|
1299 |
|
|
1300 |
Data type: `Optional[Enum['tcp', 'tcp4', 'tcp6', 'udp', 'udp4', 'udp6']]` |
|
1301 |
|
|
1302 |
|
|
1303 |
|
|
1304 |
Default value: ``undef`` |
|
1305 |
|
|
1306 |
##### `daddr` |
|
1307 |
|
|
1308 |
Data type: `Optional[Nftables::Addr]` |
|
1309 |
|
|
1310 |
|
|
1311 |
|
|
1312 |
Default value: ``undef`` |
|
1313 |
|
|
1314 |
##### `set_type` |
|
1315 |
|
|
1316 |
Data type: `Enum['ip', 'ip6']` |
|
1317 |
|
|
1318 |
|
|
1319 |
|
|
1320 |
Default value: `'ip6'` |
|
1321 |
|
|
1322 |
##### `sport` |
|
1323 |
|
|
1324 |
Data type: `Optional[Nftables::Port]` |
|
1325 |
|
|
1326 |
|
|
1327 |
|
|
1328 |
Default value: ``undef`` |
|
1329 |
|
|
1330 |
##### `saddr` |
|
1331 |
|
|
1332 |
Data type: `Optional[Nftables::Addr]` |
|
1333 |
|
|
1334 |
|
|
1335 |
|
|
1336 |
Default value: ``undef`` |
|
1337 |
|
|
1338 |
##### `counter` |
|
1339 |
|
|
1340 |
Data type: `Boolean` |
|
1341 |
|
|
1342 |
|
|
1343 |
|
|
1344 |
Default value: ``false`` |
|
1345 |
|
|
1346 |
## Data types |
|
1347 |
|
|
1348 |
### `Nftables::Addr` |
|
1349 |
|
|
1350 |
Represents an address expression to be used within a rule. |
|
1351 |
|
|
1352 |
Alias of `Variant[Stdlib::IP::Address::V6, Stdlib::IP::Address::V4, Nftables::Addr::Set]` |
|
1353 |
|
|
1354 |
### `Nftables::Addr::Set` |
|
1355 |
|
|
1356 |
Represents a set expression to be used within a rule. |
|
1357 |
|
|
1358 |
Alias of `Pattern[/^@[-a-zA-Z0-9_]+$/]` |
|
1359 |
|
|
1360 |
### `Nftables::Port` |
|
1361 |
|
|
1362 |
Represents a port expression to be used within a rule. |
|
1363 |
|
|
1364 |
Alias of `Variant[Array[Stdlib::Port, 1], Stdlib::Port, Nftables::Port::Range]` |
|
1365 |
|
|
1366 |
### `Nftables::Port::Range` |
|
1367 |
|
|
1368 |
Represents a port range expression to be used within a rule. |
|
1369 |
|
|
1370 |
Alias of `Pattern[/^\d+-\d+$/]` |
|
1371 |
|
Formats disponibles : Unified diff