iptables-formula

Commit graph

Autor	SHA1	Nachricht	Datum
Dzmitry Stremkouski	c01bfc9661	Unsafe grains call in iptables formula fix state iptables.rules may fail if grains_yaml is None Change-Id: Ibd59c33345f1af97267a7632d3e5b64d885c41e8	vor 6 Jahren
Piotr Pieprzycki	7df3a168f8	Pillar that cointains string variables throw jinja error (#15 ) * change file mode to 644 * change file mode to 644 * Fix problem with stringvariable in pillar	vor 7 Jahren
Piotr Pieprzycki	63f4e9bdfc	Changed file permissions - fix (#14 ) * change file mode to 644 * change file mode to 644	vor 7 Jahren
Piotr Pieprzycki	166f97e199	new parameters allowed in pillar	vor 7 Jahren
Dmitry Stremkouski	afb406c73f	Adding comment option to iptables rule Change-Id: I9d93052cfc197a364b42240448344d5543e8805f	vor 7 Jahren
Michel Nederlof	dd2d4cfe84	Allow custom chains to be present (#12 ) * Allow custom chains to be present, other than the INPUT, FORWARD, OUTPUT default chains. * Adding missing endif * Require the packages to be installed first. * Test should use rules as key, not rule. * Making it a array list, instead of a dict. * convert rules to a list instead of a dict. * Only if policy is defined, include this statement. * Only ensure chains if not container :) * The chain is only ensured if we are not a container. * Do not run at all for containers.	vor 7 Jahren
Dennis van Dok	3bee76dcd6	add the option to specify the family per rule to support ipv6 (#3 ) Closes: #2 * add the option to specify the family per rule to support ipv6 * include policy updates for ipv6 * update documentation to mention ipv6 * Make ipv6 optional; remove spurious tabs from the readme. * set ipv6 policies only if ipv6 is enabled on the host and not explicitly turned off for this service	vor 7 Jahren
Filip Pytloun	23030090ac	Fix service name for xenial and newer distributions using netfilter	vor 7 Jahren
Filip Pytloun	6006256763	Fix documentation, remove obsolete	vor 8 Jahren
Filip Pytloun	9540426989	Allow using to-port option	vor 8 Jahren
Filip Pytloun	8e8389246f	Allow setting iptables by support metadata	vor 8 Jahren
Filip Pytloun	cb65f8a096	Refactor to allow both explicit position and append	vor 8 Jahren
Filip Pytloun	bd5d136886	Fix iptables insert vs. append, enhance iptables disabling	vor 8 Jahren
Filip Pytloun	21c93fb4e5	Don't set policy if rules failed	vor 8 Jahren
Adam Tengler	cf977c62f0	to_source parameter added	vor 9 Jahren
Alena Holanova	5dcd673814	Add support metadata	vor 9 Jahren
Filip Pytloun	79d520802f	Policy requires table argument (but default should be filter)	vor 9 Jahren
Filip Pytloun	9dc2a1a4fa	Allow setting iptables chain policy	vor 9 Jahren
Filip Pytloun	ab43e7b3a6	Initial commit	vor 9 Jahren

19 Commits (e1b3f134d94bd69a618b409509bf4316378a751f)