puppet nftables

Révision fcb79d73

support a different table name for 'nat'
- Some applications (such as libvirt) still use iptables to inject firewall
rules
- iptables will refuse to update tables that were initially created with nft
- This commit allows defining the name of the 'nat' table in order to avoid
namespace conflicts

include "inet-filter.nft"

<% } -%>

<% if $nat { -%>

include "ip-nat.nft"

include "ip6-nat.nft"

include "ip-<%= $nftables::nat_table_name %>.nft"

include "ip6-<%= $nftables::nat_table_name %>.nft"

<% } -%>

Formats disponibles : Unified diff