root / manifests / rules / mdns.pp @ baad986e
Historique | Voir | Annoter | Télécharger (462 octets)
| 1 | 5ffd0328 | Tim Meusel | # |
|---|---|---|---|
| 2 | # @summary allow incoming multicast DNS |
||
| 3 | # |
||
| 4 | ad3dbd7d | Ewoud Kohl van Wijngaarden | # @param ipv4 |
| 5 | # Allow mdns over IPv4 |
||
| 6 | # @param ipv6 |
||
| 7 | # Allow mdns over IPv6 |
||
| 8 | class nftables::rules::mdns ( |
||
| 9 | Boolean $ipv4 = true, |
||
| 10 | Boolean $ipv6 = true, |
||
| 11 | ) {
|
||
| 12 | if $ipv4 {
|
||
| 13 | nftables::rule { 'default_in-mdns_v4':
|
||
| 14 | content => 'ip daddr 224.0.0.251 udp dport 5353 accept', |
||
| 15 | } |
||
| 16 | 5ffd0328 | Tim Meusel | } |
| 17 | ad3dbd7d | Ewoud Kohl van Wijngaarden | if $ipv6 {
|
| 18 | nftables::rule { 'default_in-mdns_v6':
|
||
| 19 | content => 'ip6 daddr ff02::fb udp dport 5353 accept', |
||
| 20 | } |
||
| 21 | c2e342b2 | Tim Meusel | } |
| 22 | 5ffd0328 | Tim Meusel | } |