diff options
| author | intrigeri <intrigeri@boum.org> | 2012-01-07 06:09:54 +0100 |
|---|---|---|
| committer | Micah Anderson <micah@riseup.net> | 2012-06-20 10:47:15 -0400 |
| commit | 6cb88973f53aa7d92414797dd21952c1c1d5da98 (patch) | |
| tree | 6fa93a250d68067c079b2fb9c2feb29f81f61e37 /README | |
| parent | b67bb6c1571506ae4b1d49feab06e73b75515f29 (diff) | |
| download | puppet-shorewall-6cb88973f53aa7d92414797dd21952c1c1d5da98.tar.gz puppet-shorewall-6cb88973f53aa7d92414797dd21952c1c1d5da98.tar.bz2 | |
Support exempting some users from torification measures.
Diffstat (limited to 'README')
| -rw-r--r-- | README | 5 |
1 files changed, 4 insertions, 1 deletions
@@ -88,8 +88,11 @@ When no destination is provided traffic directed to RFC1918 addresses is by default allowed and (obviously) not torified. This behaviour can be changed by setting the allow_rfc1918 parameter to false. -Torify any outgoing TCP traffic but connections to RFC1918 addresses: +Torify any outgoing TCP traffic but + - connections to RFC1918 addresses + - connections from users bob and alice: + $non_torified_users = [ 'bob', 'alice' ] shorewall::rules::torify { 'torify-everything-but-lan': } |