diff options
author | Thore Bödecker <me@foxxx0.de> | 2019-09-24 16:35:19 +0200 |
---|---|---|
committer | Tim Meusel <tim@bastelfreak.de> | 2019-10-01 15:39:18 +0200 |
commit | 19c71d9abd269d88450f54ddb95e036c804a8fe8 (patch) | |
tree | fe643419b2d7ea32661cec188e88b2dd420bf9fe /manifests | |
parent | 936d5f7c4b41ae8249f432827370815f2ec88dae (diff) | |
download | puppet-ferm-19c71d9abd269d88450f54ddb95e036c804a8fe8.tar.gz puppet-ferm-19c71d9abd269d88450f54ddb95e036c804a8fe8.tar.bz2 |
disable conntrack filtering in FORWARD/OUTPUT
conntrack filtering basically doesn't work in those chains, so we need
to disable it.
Diffstat (limited to 'manifests')
-rw-r--r-- | manifests/config.pp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/manifests/config.pp b/manifests/config.pp index 7dae7a5..16ecd9e 100644 --- a/manifests/config.pp +++ b/manifests/config.pp @@ -49,12 +49,12 @@ class ferm::config { } ferm::chain{'FORWARD': policy => $ferm::forward_policy, - disable_conntrack => $ferm::disable_conntrack, + disable_conntrack => true, log_dropped_packets => $ferm::forward_log_dropped_packets, } ferm::chain{'OUTPUT': policy => $ferm::output_policy, - disable_conntrack => $ferm::disable_conntrack, + disable_conntrack => true, log_dropped_packets => $ferm::output_log_dropped_packets, } |