aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-09-11add ability to define rules in tables != filterThore Bödecker
Previously it was neither possible to properly define custom chains nor to define rules in tables other than the default filter table. For various legitimate reasons it can be required to define rules in the raw, nat or mangle tables, e.g. to use NOTRACK or to configure DNAT/SNAT/MASQUERADE. Additionally it might come in handy to define custom chains to group certain rules and allow a more efficient evaluation for incoming packets by not cramming all rules into the filter/INPUT chain so that (worst-case) all packets need to traverse and evaluate all rules. I have tried to maintain backwards compatibility and to not change default filenames/paths so that it won't result in leftover obsolete unmaged files from previous versions of this module. In order to improve the naming schema the rule $policy has been renamed to $action, however both parameters are available and optional now, with some sanity checks that require at most one of them and issueing a warning() for users of the now deprecated $policy parameter. All previous tests have been adapted to the changes, a long with an additional set of tests for the new feature. Fixes #61
2019-09-09Merge pull request #59 from Dan33l/enable_acceptanceFabien COMBERNOUS
enable acceptance and drop EOL ubuntu1404
2019-09-09enable acceptanceFabien COMBERNOUS
2019-09-09drop EOL ubuntu1404Fabien COMBERNOUS
2019-09-09Merge pull request #65 from Dan33l/status_optionTim Meusel
add missing status option for CentOS 6 init script
2019-09-09add status optionFabien COMBERNOUS
2019-09-09Merge pull request #62 from Dan33l/drop_debian_from_supported_osesTim Meusel
drop Debian from supported OSes
2019-09-09drop Debian from supported OSesFabien COMBERNOUS
2019-09-02[blacksmith] Bump version to 2.4.1-rc0Tim Meusel
2019-09-02Merge pull request #56 from bastelfreak/rel240Tim Meusel
release 2.4.0
2019-09-02release 2.4.0Tim Meusel
2019-09-02Merge pull request #55 from bastelfreak/chainsTim Meusel
allow preserving of chains in tables
2019-09-02allow preserving of chains in tablesThore Bödecker
2019-09-01Merge pull request #54 from bastelfreak/debian10Tim Meusel
Add Debian 10 support & make configdirectory configureable
2019-09-01Add Debian 10 support & make configdirectory configureableTim Meusel
2019-08-31Merge pull request #52 from bastelfreak/docsDavid Hollinger III
allow all supported iptables protocolls & enhance puppet-strings documentation Unverified
2019-08-31Merge pull request #53 from bastelfreak/freebsdDavid Hollinger III
remove FreeBSD from supported OS list
2019-08-31remove FreeBSD from supported OS listTim Meusel
This module only works on systems with a linux kernel and iptables.
2019-08-31enhance puppet-strings documentationTim Meusel
2019-08-31allow all supported iptables protocollsTim Meusel
2019-08-12Merge pull request #51 from kBite/allow-array-for-saddr-daddrTim Meusel
Allow array for saddr and daddr
2019-08-09Update README.md kBite
add missing 'a' Co-Authored-By: Tim Meusel <tim@bastelfreak.de>
2019-08-09add second pair of parenthesisKilian Engelhardt
Previously this second pair of parenthesis was part of Hiera values; e.g.: subnet01 = '( ip01/32 ip02/32 )' Now it needs to be added by ferm::rule.
2019-08-09add test for array supportKilian Engelhardt
2019-08-09add example using Hiera subnet variables to README.mdKilian Engelhardt
2019-08-08allow arrays for saddr and daddrKilian Engelhardt
check for data type IP address when using arrays add debug output when it's failing
2019-07-27Merge pull request #50 from voxpupuli/modulesyncTim Meusel
modulesync 2.8.0
2019-07-27modulesync 2.8.0Tim Meusel
2019-07-12[blacksmith] Bump version to 2.3.1-rc0Tim Meusel
2019-07-12Merge pull request #49 from bastelfreak/rel230Tim Meusel
release 2.3.0
2019-07-12release 2.3.0Tim Meusel
2019-07-12Merge pull request #48 from bastelfreak/interfaceTim Meusel
add support for interface specific rules
2019-07-11Fix markdown linter warningsTim Meusel
2019-07-11generate REFERENCE.mdTim Meusel
2019-07-11add support for interface specific rulesTim Meusel
2019-07-11enhance unit testsTim Meusel
2019-07-03Merge pull request #47 from bastelfreak/headerTim Meusel
add `managed by puppet` header to template
2019-07-03add `managed by puppet` headerTim Meusel
2019-07-03delete unneeded fileTim Meusel
2019-06-04Merge pull request #46 from dhoppe/fix_dependenciesDennis Hoppe
Allow puppetlabs/concat 6.x, puppetlabs/stdlib 6.x
2019-06-03Allow puppetlabs/concat 6.x, puppetlabs/stdlib 6.xDennis Hoppe
2019-04-06Merge pull request #45 from voxpupuli/modulesyncTim Meusel
modulesync 2.7.0
2019-04-06modulesync 2.7.0Tim Meusel
2019-04-05[blacksmith] Bump version to 2.2.1-rc0Tim Meusel
2019-04-05Merge pull request #44 from bastelfreak/rel220Tim Meusel
Release 2.2.0
2019-04-05release 2.2.0Tim Meusel
2019-04-05generate REFERENCE.mdTim Meusel
2019-04-05Merge pull request #43 from kBite/add-redhat-init-scriptDennis Hoppe
Add RedHat init script
2019-04-05add parameter manage_initfile with default falseKilian Engelhardt
2019-04-05add test for RedHat-like to contain init scriptKilian Engelhardt
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-01 14:05:26 +0000