puppet nftables

#    * chain: Will be replaced by the name of the chain.

#    * comment: Allows chains to add extra comments.

#

# @param log_limit

#  String with the content of a limit statement to be applied

#  to the rules that log discarded traffic. Set to false to

  Hash $sets = {},

  String $log_prefix = '[nftables] %<chain>s %<comment>s',

  String[1] $nat_table_name = 'nat',

  Variant[Boolean[false], String] $log_limit = '3/minute burst 5 packets',

  Variant[Boolean[false], Pattern[/icmp(v6|x)? type .+|tcp reset/]] $reject_with = 'icmpx type port-unreachable',

  Variant[Boolean[false], Enum['mask']] $firewalld_enable = 'mask',