puppet nftables

#

# @param iifname

#   Optional filter for the incoming interface

define nftables::simplerule (

  Enum['present','absent'] $ensure = 'present',

  Nftables::SimpleRuleName $rulename = $title,

  Optional[Nftables::Addr] $saddr = undef,

  Boolean $counter = false,

  Optional[String[1]] $iifname = undef,

) {

  if $dport and !$proto {

    fail('Specifying a transport protocol via $proto is mandatory when passing a $dport')

          'set_type' => $set_type,

          'sport'    => $sport,

          'iifname'  => $iifname,

        }

      ),

      order   => $order,