puppet nftables

# @param nat

#   Add default tables and chains to process NAT traffic.

#

# @param log_prefix

#   String that will be used as prefix when logging packets. It can contain

#   two variables using standard sprintf() string-formatting:

  Boolean $in_out_conntrack      = true,

  Boolean $nat                   = true,

  Hash $rules                    = {},

  String $log_prefix             = '[nftables] %<chain>s %<comment>s',

  Variant[Boolean[false], Pattern[

    /icmp(v6|x)? type .+|tcp reset/]]

        * => $v

    }

  }

}