puppet-shorewall - Puppet module for shorewall

Age	Commit message (Collapse)	Author
2015-12-05	update a few headers	mh

2015-12-05	Deprecated	Sylvain Veyrié

2015-12-05	Non string mode is now deprecated	Sylvain Veyrié

2015-12-05	fix the missing include	mh

2015-12-05	get rid off lsb facts	mh

2015-12-05	indentation	mh

2015-12-05	there might be people who don't have a stun server	mh

2015-12-05	linting	mh

2015-12-05	a cleaner naming	mh

2015-12-05	add rule for stun	o

2015-12-05	add rule for openvpn	o

2015-12-05	manage new and legacy ports of managesieve	mh

2015-12-05	add rules for pyzor	mh

2015-12-05	make it easier to override behaviour of the dns rules	mh

2015-12-05	The augeas module is not needed, but the concat module is	Sylvain Veyrié

2015-12-05	fix define	mh

2015-12-05	migrate ipsec rules to a define so we can specify multiple zones	mh

2015-12-05	only manage the config_path if we do not manage the config file	mh

2015-12-05	use the centos class on centos based systems	mh

2015-12-05	with the latest updates on EL6 this is needed	mh

2015-11-28	Merge branch 'master' into 'master'	ng
	Remove 'require augeas' (#4396) Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility. See merge request !3
2015-10-09	Merge branch 'feature/mangle-support-multiple-rules-with-same-action' into ↵	Micah
	'master' Feature/mangle support multiple rules with same action This allows one to support multiple networks in libvirt. See merge request !4
2015-07-16	shorewall::rules::libvirt::host: adjust to changes in shorewall::mangle.	intrigeri
	That is, make the resource's title more unique by including the destination interface in it, and accordingly pass the desired action via the new, dedicated parameter.
2015-07-16	shorewall::mangle: allow specifying the ACTION explicitly.	intrigeri
	Previously, it was using $name, which prevented adding multiple mangle rules that share a common ACTION, with different parameters.
2015-07-08	fixed code indentation, added gitlab shared remote	varac

2015-07-08	moved README to README.md so it hopefully renders as markdown in gitlab now	varac

2015-05-19	provide a class ordering hint for augeas setup	Micah Anderson

2015-05-19	Remove 'require augeas' (#4396)	Micah Anderson
	Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility.
2015-05-08	Make sure MUNINCOLLECTOR join() gets an array in munin rule	Jerome Charaoui

2015-04-17	Add GPLv3 license	Micah Anderson

2015-03-02	Merge branch 'bugfix/Fix_DHCP_for_libvirt' into 'master'	Jerome Charaoui
	Fix dhcp for libvirt This branch uses the mangle table support added by the feature/Add_support_for_mangle_table branch to fix the libvirt DHCP when broken by recent kernel. It fills the checksum of this kind of packets on the libvirt interface. This patch shouldn't break older setup, and is implemented so that it can be disabled. See merge request !2
2015-03-02	Merge branch 'feature/Add_support_for_mangle_table' into 'master'	Jerome Charaoui
	Add support for mangle table. When using the kernel from Debian Wheezy-backports (3.16.0-0.bpo.4-amd64), we encoutered a bug where shorewall was breaking the libvirt DHCP if restarted after it. It seems that one has to add a rule in the POSTROUTING chain of the mangle table to --checksum-fill the DHCP packets for them to be properly catch by the VMs DHCP clients. So we had to add support of the mangle table to the shared puppet module to fix that. This patch does just that, and is meant to be used by the other branch I'll propose after. See merge request !1
2015-02-27	Fix DHCP from $vmz.	bertagaz
	On newer kernel (tested on 3.16), the libvirt and shorewall iptables rules have conflicts that need to be fixed by enabling back --checksum-fill on $vmz, otherwise the VMs can't get a DHCP lease.
2015-02-27	Add support for the mangle table.	bertagaz

2013-06-14	Merge remote-tracking branch 'intrigeri/feature/libvirt-host'	Micah Anderson

2013-03-23	linting	mh

2013-03-23	only manage the config_path if we do not manage the config file	mh

2013-03-23	linting the init.pp	mh

2013-03-23	use the centos class on centos based systems	mh

2013-03-23	with the latest updates on EL6 this is needed	mh

2013-03-02	fixed leftovers from concat_file in rtrules.pp and tunnel.pp	varac

2013-02-23	remove the class requirement in the augeas block, it is handled by the ↵	Micah Anderson
	top-level require
2013-02-23	change the 'include augeas' to a 'require augeas'	Micah Anderson

2013-02-20	add requirement for augeas module	Micah Anderson

2013-02-12	augeas definition needs to make sure the shorewall package is installed ↵	Micah Anderson
	before it tries to run
2013-02-09	Linting.	intrigeri

2013-02-09	Allow not setting up masquerading in libvirt::host.	intrigeri

2013-02-09	libvirt::host: make debproxy port configurable.	intrigeri

2013-01-24	fix missing dependency on augeas	Micah Anderson
	make sure that the augeas class has been applied before attempting to do any augeas operations. without this, you will non-deterministically get: err: /Stage[main]/Shorewall::Base/Augeas[shorewall_module_config_path]: Could not evaluate: Save failed with return code false
2013-01-02	cleanup a merge issue	mh