puppet nftables

Révision fcb79d73

support a different table name for 'nat'
- Some applications (such as libvirt) still use iptables to inject firewall
rules
- iptables will refuse to update tables that were initially created with nft
- This commit allows defining the name of the 'nat' table in order to avoid
namespace conflicts

  nftables::rule {

    "${chain}-${rulename}":

      ensure  => $ensure,

      table   => 'ip-nat',

      table   => "ip-${nftables::nat_table_name}",

      order   => $order,

      content => "${oifname}${src}${dst}${protocol}${port}masquerade";

  }

Formats disponibles : Unified diff