aboutsummaryrefslogtreecommitdiff
path: root/spec/acceptance/ferm_spec.rb
AgeCommit message (Collapse)Author
2020-06-22implement multiport support for dport/sportThore Bödecker
2020-05-18add install_method parameterFabien COMBERNOUS
2020-05-07Allow adding custom ferm dsl for subchains. This is important for using ↵Rehan Mahmood
complex iptable rules that are currently not supported by this module or would be very hard to manage just using puppet.
2020-04-21make dropping of pakets marked as invalid optionalTim Meusel
2020-04-21use dedicated conntrack parametersFabien COMBERNOUS
2019-10-29revert PR81Fabien COMBERNOUS
2019-10-01disable conntrack filtering in FORWARD/OUTPUTThore Bödecker
conntrack filtering basically doesn't work in those chains, so we need to disable it.
2019-09-12readd Debian 9/10 supportTim Meusel
2019-09-11add ability to define rules in tables != filterThore Bödecker
Previously it was neither possible to properly define custom chains nor to define rules in tables other than the default filter table. For various legitimate reasons it can be required to define rules in the raw, nat or mangle tables, e.g. to use NOTRACK or to configure DNAT/SNAT/MASQUERADE. Additionally it might come in handy to define custom chains to group certain rules and allow a more efficient evaluation for incoming packets by not cramming all rules into the filter/INPUT chain so that (worst-case) all packets need to traverse and evaluate all rules. I have tried to maintain backwards compatibility and to not change default filenames/paths so that it won't result in leftover obsolete unmaged files from previous versions of this module. In order to improve the naming schema the rule $policy has been renamed to $action, however both parameters are available and optional now, with some sanity checks that require at most one of them and issueing a warning() for users of the now deprecated $policy parameter. All previous tests have been adapted to the changes, a long with an additional set of tests for the new feature. Fixes #61
2019-09-09enable acceptanceFabien COMBERNOUS