| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-09-11 | add ability to define rules in tables != filter | Thore Bödecker | |
| Previously it was neither possible to properly define custom chains nor to define rules in tables other than the default filter table. For various legitimate reasons it can be required to define rules in the raw, nat or mangle tables, e.g. to use NOTRACK or to configure DNAT/SNAT/MASQUERADE. Additionally it might come in handy to define custom chains to group certain rules and allow a more efficient evaluation for incoming packets by not cramming all rules into the filter/INPUT chain so that (worst-case) all packets need to traverse and evaluate all rules. I have tried to maintain backwards compatibility and to not change default filenames/paths so that it won't result in leftover obsolete unmaged files from previous versions of this module. In order to improve the naming schema the rule $policy has been renamed to $action, however both parameters are available and optional now, with some sanity checks that require at most one of them and issueing a warning() for users of the now deprecated $policy parameter. All previous tests have been adapted to the changes, a long with an additional set of tests for the new feature. Fixes #61 | |||
| 2019-09-09 | enable acceptance | Fabien COMBERNOUS | |
| 2019-09-02 | allow preserving of chains in tables | Thore Bödecker | |
| 2019-09-01 | Add Debian 10 support & make configdirectory configureable | Tim Meusel | |
| 2019-08-09 | add second pair of parenthesis | Kilian Engelhardt | |
| Previously this second pair of parenthesis was part of Hiera values; e.g.: subnet01 = '( ip01/32 ip02/32 )' Now it needs to be added by ferm::rule. | |||
| 2019-08-09 | add test for array support | Kilian Engelhardt | |
| 2019-07-27 | modulesync 2.8.0 | Tim Meusel | |
| 2019-07-11 | add support for interface specific rules | Tim Meusel | |
| 2019-07-11 | enhance unit tests | Tim Meusel | |
| 2019-04-06 | modulesync 2.7.0 | Tim Meusel | |
| 2019-04-05 | add test for RedHat-like to contain init script | Kilian Engelhardt | |
| 2019-01-24 | modulesync 2.5.1 | Tim Meusel | |
| 2018-12-19 | Implement logging to kernel log | Tim Meusel | |
| 2018-12-04 | modulesync 2.3.1 | Tim Meusel | |
| 2018-07-11 | rubocop: autofix | Tim Meusel | |
| 2018-07-11 | disable rule caching on ubuntu | Tim Meusel | |
| Fixes #16. Ubuntu caches rules. This doesn't allow us to reload the daemon and to apply new rules. Also this is a ubuntu only feature, it works well on all other platforms without cache. | |||
| 2018-07-11 | add official ubuntu support | Tim Meusel | |
| 2018-05-22 | Remove docker nodesets | Tim Meusel | |
| 2018-05-20 | modulesync 1.9.2 | Tim Meusel | |
| 2018-03-23 | modulesync 1.9.0 | TraGicCode | |
| 2018-03-17 | add test to verify chains do not use conntrack | Kilian Engelhardt | |
| 2018-03-15 | initial commit | Tim Meusel | |
 |
index : puppet-ferm | |
| Puppet module for ferm | Fluxo |
| aboutsummaryrefslogtreecommitdiff |