Use /usr/sbin for nft binary path in systemd service
/sbin in Debian Buster is a symbolic link to /usr/sbin; however,in Debian Stretch it's a separate folder and the nft binary isin /usr/sbin/nft. Note: this commit probably breaks support forCentOS, but I'm not planning on requesting to merge this commit...
Convert puppet_nft systemd drop-in unit file to template
Remove duplicate flush on reload
When nftables was reloaded a flush was being done both in the systemdreload call and in the nft script itself.
New parameter noflush_tables to selectivly skip flush
Introduces a new structured fact nftables
```yamlnftables: tables: - inet-filter - ip-nat - ip6-nat - inet-f2b-table```
By default the nft script will continue to contain `nft flush ruleset`...
Voir les révisions
Formats disponibles : Atom
