aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-21Merge pull request #102 from bastelfreak/rel300Tim Meusel
release 3.0.0
2020-04-21release 3.0.0Tim Meusel
2020-04-21Merge pull request #101 from bastelfreak/logTim Meusel
by default dont log dropped packets
2020-04-21by default dont log dropped packetsTim Meusel
2020-04-21Merge pull request #100 from bastelfreak/invalidTim Meusel
make dropping of invalid pakets optional
2020-04-21make dropping of pakets marked as invalid optionalTim Meusel
2020-04-21Merge pull request #90 from Dan33l/add_conntrack_dedicatedTim Meusel
use dedicated conntrack parameters / by default disable conntrack for new chains / by default enable conntrack for filter INPUT chain
2020-04-21use dedicated conntrack parametersFabien COMBERNOUS
2020-04-10Merge pull request #99 from bastelfreak/docsTim Meusel
cleanup puppet-strings documentation
2020-04-09cleanup puppet-strings documentationTim Meusel
2020-04-07Merge pull request #97 from voxpupuli/rewrite-acceptance-testsTim Meusel
Use voxpupuli-acceptance
2020-04-07Use voxpupuli-acceptanceEwoud Kohl van Wijngaarden
2020-04-03Merge pull request #95 from bastelfreak/vzTim Meusel
Add VZ 6/7 to metadata.json
2020-03-02Add VZ 6/7 to metadata.jsonTim Meusel
2020-02-11Merge pull request #92 from bastelfreak/travisGarrett Honeycutt
delete legacy travis directory
2020-02-11Merge pull request #94 from voxpupuli/modulesyncGarrett Honeycutt
modulesync 3.0.0
2020-02-11cleanup spec_helper.rbTim Meusel
2020-02-11modulesync 3.0.0Tim Meusel
2019-12-22Merge pull request #93 from voxpupuli/modulesyncTim Meusel
modulesync 2.10.0
2019-12-22modulesync 2.10.0Tim Meusel
2019-12-16delete legacy travis directoryTim Meusel
2019-12-09Merge pull request #91 from voxpupuli/modulesyncTim Meusel
modulesync 2.9.0
2019-12-06modulesync 2.9.0Dennis Hoppe
2019-10-29[blacksmith] Bump version to 2.7.1-rc0Fabien COMBERNOUS
2019-10-29Merge pull request #89 from Dan33l/release_2.7.0Fabien COMBERNOUS
release 2.7.0
2019-10-29release 2.7.0Fabien COMBERNOUS
2019-10-29Merge pull request #88 from Dan33l/revert-pr81Fabien COMBERNOUS
revert PR81
2019-10-29revert PR81Fabien COMBERNOUS
2019-10-08[blacksmith] Bump version to 2.6.1-rc0Tim Meusel
2019-10-08Merge pull request #86 from bastelfreak/rel260Tim Meusel
release 2.6.0
2019-10-08release 2.6.0Tim Meusel
2019-10-08Merge pull request #85 from bastelfreak/bugfixTim Meusel
ipset: allow multiple instances of defined resource
2019-10-08ipset: allow multiple instances of defined resourceTim Meusel
2019-10-01Merge pull request #80 from bastelfreak/ipsetsTim Meusel
implement ipset support
2019-10-01implement ipset supportTim Meusel
2019-10-01Merge pull request #84 from bastelfreak/docs4Tim Meusel
update docker firewalling example
2019-10-01Merge pull request #81 from bastelfreak/hotifxTim Meusel
disable conntrack filtering in FORWARD/OUTPUT
2019-10-01update docker firewalling exampleTim Meusel
2019-10-01disable conntrack filtering in FORWARD/OUTPUTThore Bödecker
conntrack filtering basically doesn't work in those chains, so we need to disable it.
2019-10-01Merge pull request #83 from bastelfreak/docs3Tim Meusel
delete legacy docs/ folder
2019-10-01delete legacy docs/ folderTim Meusel
We now have a REFERENCE.md in the repository. We don't need the docs/ folder anymore.
2019-09-21Merge pull request #75 from Dan33l/move_common_initTim Meusel
move common from hiera data values to init.pp
2019-09-18move common from hiera data values to init.ppFabien COMBERNOUS
2019-09-13[blacksmith] Bump version to 2.5.1-rc0Tim Meusel
2019-09-13Merge pull request #70 from Dan33l/release-2.5.0Tim Meusel
release 2.5.0
2019-09-13release 2.5.0Fabien COMBERNOUS
2019-09-13Merge pull request #73 from foxxx0/add-more-examplesFabien COMBERNOUS
Add more examples
2019-09-13Merge pull request #72 from foxxx0/fix-kernel-incompatibilitiesTim Meusel
fix kernel incompatibilities
2019-09-13add conntrack/NOTRACK exampleThore Bödecker
2019-09-13fix kernel incompatibilitiesThore Bödecker
Certain kernel modules and thus iptables functionality was introduced at later releases, so we need to properly reflect that in our default chain initialization procedure. `INPUT` chain for `nat` table was introduced with 2.6.36 `ip6table_nat` kernel module for NAT functionality with IPv6 was introduced with 3.17 This commit implements the required conditional constraints and includes the rspec tests to validate it.