Comments (8)
geoffdavis
commented on July 23, 2024
Original Redmine ticket is http://projects.puppetlabs.com/issues/11100
That ticket contained a solution but it was against 0.4.0 and doesn't merge cleanly against 0.2.0
from puppetlabs-firewall.
iaslanidis
commented on July 23, 2024
When is this getting merged into the official puppetlabs firewall module?
from puppetlabs-firewall.
kbarber
commented on July 23, 2024
@iaslanidis the patch @geoffdavis has provided is not ready to merge.
from puppetlabs-firewall.
geoffdavis
commented on July 23, 2024
It's also worth noting that my later attempts at getting something to work are doing ok in production for us, except that ipv6 is broken. I have not bothered with a pull request because of this.
It works well enough in our environment which doesn't have IPv6 enabled.
from puppetlabs-firewall.
iaslanidis
commented on July 23, 2024
Do you have any advise on how to implement port knocking without this being pulled in? Is there a way to pass raw iptables commands?
from puppetlabs-firewall.
commented on July 23, 2024
Hi.
May I ask what is the status of this? Thanks.
from puppetlabs-firewall.
mikebryant
commented on July 23, 2024
@Gorkhaan Support for the recent module was merged yesterday in #296
@hunner I think this issue can be closed?
from puppetlabs-firewall.
hunner
commented on July 23, 2024
Yep, thanks.
from puppetlabs-firewall.
Related Issues (20)
- Use nftables instead of iptables where it is supported.
- Getting problems on the firewall on redhat 8
- No value is detected for nflog-prefix HOT 2
- Allow --reject-with tcp-reset for TCP rules
- Could not evaluate: `proto` must be set to `tcp` for `isfragment` to be true.
- firewall.toports expects an undef value or a match for Pattern[/^\d+(?:-\d+)?$/], got Integer
- Hyphen in the ipset's hash name breaks a firewall resource
- Puppet repeatedly attempts to correct firewall rules when `source` has a prefix length of zero HOT 8
- Add path option for cgroup
- Add back IPv6 protocol support for recent rule masks HOT 1
- Add support for parsing and using socket parameters
- issue with match_mark regex HOT 1
- Performance degradation in resource_api version
- single quotes in rule comments produces errors HOT 4
- puppet generate types fail on versions >= 7.0.0 HOT 2
- Non idempotent logs for empty firewall chains HOT 8
- hostnames with multiple address are not handled completely
- Link in CONTRIBUTING.md returns a 404.
- Defining a state as an array can cause an unnecessary updating action
- Using a LOG jump with a log_level of 4 causes an unnecessary updating action
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from puppetlabs-firewall.