diff options
| author | Kilian Engelhardt <kilian.engelhardt@godaddy.com> | 2018-03-16 16:49:00 +0100 |
|---|---|---|
| committer | Kilian Engelhardt <kilian.engelhardt@godaddy.com> | 2018-03-17 15:10:36 +0100 |
| commit | b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3 (patch) | |
| tree | 100fb2a5648a5b5b98f99ac529b4e64c994b3bc6 /templates | |
| parent | aadcd554e91188ecaabb70b70a456bb5baa328e0 (diff) | |
| download | puppet-ferm-b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3.tar.gz puppet-ferm-b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3.tar.bz2 | |
introduce parameter disable_conntrack
Default value of disable_conntrack is 'false'. Existing installations
are not affected by this change.
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/ferm_chain_header.conf.epp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/templates/ferm_chain_header.conf.epp b/templates/ferm_chain_header.conf.epp index b8c444c..e2c30e6 100644 --- a/templates/ferm_chain_header.conf.epp +++ b/templates/ferm_chain_header.conf.epp @@ -1,8 +1,11 @@ <%- | Ferm::Policies $policy, + Boolean $disable_conntrack, | -%> # Default policy for this chain policy <%= $policy %>; +<% unless $disable_conntrack { -%> # connection tracking mod state state INVALID DROP; mod state state (ESTABLISHED RELATED) ACCEPT; +<% } -%> |