Projet

Général

Profil

Révision a528bf59

IDa528bf593a7b3671efbadefb13bb3e81130dd29c
Parent 1331dc33
Enfant de945d0d

Ajouté par Steve Traylen il y a 11 mois

New clobber_default_config paramter

Certain OSes namely Debian and Archlinux provide default rules
with the OS.

This module has always respected those rules and appended all of
its own rules to the end of the existing rules.

The new parameter `clobber_default_config` if set `true` (default `false`)
will drop any existing OS provided rules.

Also related to acceptance tests only on Archlinux where the default
OS provided configuration requires kernel >= 6.3 we purge the default rules
if required.

Voir les différences:

REFERENCE.md
178 178
* [`nft_path`](#-nftables--nft_path)
179 179
* [`echo`](#-nftables--echo)
180 180
* [`default_config_mode`](#-nftables--default_config_mode)
181
* [`clobber_default_config`](#-nftables--clobber_default_config)
181 182

  
182 183
##### <a name="-nftables--out_all"></a>`out_all`
183 184

  
......
404 405
The default file & dir mode for configuration files and directories. The
405 406
default varies depending on the system, and is set in the module's data.
406 407

  
408
##### <a name="-nftables--clobber_default_config"></a>`clobber_default_config`
409

  
410
Data type: `Boolean`
411

  
412
Should the existing OS provided rules in the `configuration_path` be removed? If
413
they are not being removed this module will add all of its configuration to the end of
414
the existing rules.
415

  
416
Default value: `false`
417

  
407 418
### <a name="nftables--bridges"></a>`nftables::bridges`
408 419

  
409 420
allow forwarding traffic on bridges

Formats disponibles : Unified diff