f28d9bd21c01001f8babb89fb426f3b99fcc8dce Ruben Kerkhof ruben@tilaa.nl http://github.com/camptocamp/puppet-iptables/commit/5b970bbc0ed0c404db6295d07ed7eb7974140b7c 5b970bbc0ed0c404db6295d07ed7eb7974140b7c

2009-10-10T09:48:49-07:00

Add REDIRECT support eb2fb936fb09997773cda0061a81db87d70f3d1b Ruben Kerkhof ruben@tilaa.nl 0114eef3c99991a7493983106eca843687b22d5f Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/f28d9bd21c01001f8babb89fb426f3b99fcc8dce f28d9bd21c01001f8babb89fb426f3b99fcc8dce

2009-09-24T08:04:56-07:00

2009-09-24T08:01:45-07:00

iptables: added -j MASQUERADE option 1cbe91c72f1d7b5e23069aeae4b3bf36faf3da2b Marc Fournier marc.fournier@camptocamp.com 8d111abbdca365a822c14bd43ec88e345ec283e8 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/0114eef3c99991a7493983106eca843687b22d5f 0114eef3c99991a7493983106eca843687b22d5f

2009-09-12T11:25:40-07:00

improves parameter validation of "state" option 0174d5383a60c7aa822206db463e22c3dcba0b98 Marc Fournier marc.fournier@camptocamp.com bf804f7b8db3e17233808f38394a7bdde1ad3ea9 Adam Crews adam.crews@gmail.com http://github.com/camptocamp/puppet-iptables/commit/8d111abbdca365a822c14bd43ec88e345ec283e8 8d111abbdca365a822c14bd43ec88e345ec283e8

2009-09-12T10:22:21-07:00

also allow passing array of values to the "state" option Signed-off-by: Marc Fournier <marc.fournier@camptocamp.com> 5c701ec0cfdbe21dea8bc6c158f7c7811c888b87 Marc Fournier marc.fournier@camptocamp.com 84209c130ff9a8e8b4f1385acb8fc2620646d9f6 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/bf804f7b8db3e17233808f38394a7bdde1ad3ea9 bf804f7b8db3e17233808f38394a7bdde1ad3ea9

2009-09-03T07:16:44-07:00

bugfix: uninitalized variable full_string c2aae85f86832fcdfd5bdc332b719c45bd3f9907 Marc Fournier marc.fournier@camptocamp.com 5572346814e935b203b59618ea8b97a375be8966 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/84209c130ff9a8e8b4f1385acb8fc2620646d9f6 84209c130ff9a8e8b4f1385acb8fc2620646d9f6

2009-09-03T07:03:25-07:00

added input validation for --limit and --limit-burst 43a84a138f41888865e93638eec3060864a70da6 Marc Fournier marc.fournier@camptocamp.com 9dec1db6b78df712351c4834993dcf66c4a99087 Adam Crews adam.crews@gmail.com http://github.com/camptocamp/puppet-iptables/commit/5572346814e935b203b59618ea8b97a375be8966 5572346814e935b203b59618ea8b97a375be8966

2009-09-03T07:00:59-07:00

Added support for "limit" iptables module. This enables the --limit and --limit-burst parameters of iptables. Signed-off-by: Marc Fournier <marc.fournier@camptocamp.com> 2b04ddeed58d330b11d1c13c56bd429b9984b984 Marc Fournier marc.fournier@camptocamp.com 3499937b5cafcb0800ac9de22aad6b9069295db9 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/9dec1db6b78df712351c4834993dcf66c4a99087 9dec1db6b78df712351c4834993dcf66c4a99087

2009-09-03T03:05:53-07:00

Try to be a bit more clever when sorting rules. As iptables-save groups the rules by chain, we need to do this too before alphabetically sorting them. Else puppet believes the order of the rules has changed and reloads them at each run. Thanks to Adam Crews for reporting this issue ! 10f00cee110d377dd21c2efa498a1698bf3cbc3c Marc Fournier marc.fournier@camptocamp.com f10a555654b41bc20d964ea8641a2a7f7f17643b Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/3499937b5cafcb0800ac9de22aad6b9069295db9 3499937b5cafcb0800ac9de22aad6b9069295db9

2009-08-13T04:11:21-07:00

2009-08-11T12:09:32-07:00

iptables: missing refreshonly on iptables-save exec bde221a0f547469c54345b6164df543a3423fa72 Marc Fournier marc.fournier@camptocamp.com 4714949a0a48c0e58351b96f5648ce718139f877 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/f10a555654b41bc20d964ea8641a2a7f7f17643b f10a555654b41bc20d964ea8641a2a7f7f17643b

2009-08-05T12:43:26-07:00

iptables: change ip/netmask depending on iptables version With iptables-save < 1.4.0, the output we parse looks like: -A INPUT -s 127.0.0.1 -d 224.0.0.0/255.0.0.0 With newer versions, it looks like: -A INPUT -s 127.0.0.1/32 -d 224.0.0.0/8 This caused puppet to fail parsing iptables-save's output, believe the rules have changed, and run iptables each time. This patch: - extends IPAddr to add cidr notation support - sets a flag if iptables version is bigger than 1.4 - produces different source/destination values, using IPAddr, depending on this flag. c802293be486c185988bf5173a02f96c8c86a729 Marc Fournier marc.fournier@camptocamp.com 71cdb774ae14142e46dc09392c6ef08e1d349f66 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/4714949a0a48c0e58351b96f5648ce718139f877 4714949a0a48c0e58351b96f5648ce718139f877

2009-08-03T09:40:16-07:00

iptables type now honors --noop 50f8f7df1661d157572eb5def7807b616a865a03 Marc Fournier marc.fournier@camptocamp.com b47a414efc0073437402ede56d275923a34b915e Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/71cdb774ae14142e46dc09392c6ef08e1d349f66 71cdb774ae14142e46dc09392c6ef08e1d349f66

2009-08-03T09:20:00-07:00

README now in rst format bc20b9aa401fcb8bc60f878f954756d7912724d5 Marc Fournier marc.fournier@camptocamp.com 8282aa121603d941eec9c3ecd9bcdfad68a5e529 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/b47a414efc0073437402ede56d275923a34b915e b47a414efc0073437402ede56d275923a34b915e

2009-08-03T09:19:32-07:00

Added comments & improved doc; no functional change. 36197890242ed2642e9ea6cd5227d04eef0bfe4b Marc Fournier marc.fournier@camptocamp.com 53064851309ffaab0c6ec1cc7d0367e7aa103545 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/8282aa121603d941eec9c3ecd9bcdfad68a5e529 8282aa121603d941eec9c3ecd9bcdfad68a5e529

2009-08-03T06:00:32-07:00

emit warning if netmask is omitted. A notice will be displayed if you do: itpables { "localhost": source => "127.0.0.1" } instead of: itpables { "localhost": source => "127.0.0.1/32" } iptables-save always appends the netmask to ip addresses. So if the netmask misses from the puppet resource, it won't get matched as beeing the same rule, and therefore will reload iptables rules at each puppet run. 899654bc6a94ad276deb1bad407fa3dfc5173506 Marc Fournier marc.fournier@camptocamp.com d071da454edf106e2627a06dc4d940e989b68c40 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/53064851309ffaab0c6ec1cc7d0367e7aa103545 53064851309ffaab0c6ec1cc7d0367e7aa103545

2009-05-25T23:24:18-07:00

reinitalized counters to 0 instead of false + improved readability 8d9d5266be5eb13871eeaab6cbf55d9055b6b2d4 Marc Fournier marc.fournier@camptocamp.com 32117d2c16e97ede89b9ae580aed1b90a3913217 Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/d071da454edf106e2627a06dc4d940e989b68c40 d071da454edf106e2627a06dc4d940e989b68c40

2009-05-25T07:18:53-07:00

Added support for IGMP ff0a3f812493e285e056b5af12ddcdf529f1e684 Marc Fournier marc.fournier@camptocamp.com a396e470b9176fdee50022006dad9bc419f5e98e Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/32117d2c16e97ede89b9ae580aed1b90a3913217 32117d2c16e97ede89b9ae580aed1b90a3913217

2009-04-22T06:44:07-07:00

updated README 748f5c9c53f3f0d59c733653d144984b663e8824 Marc Fournier marc.fournier@camptocamp.com 0a2b68f42d77797bfcf2137b2b60e3f78222dc6a Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/a396e470b9176fdee50022006dad9bc419f5e98e a396e470b9176fdee50022006dad9bc419f5e98e

2009-04-22T06:43:49-07:00

sort rules by alphabetical order 30f7e844df1cf45b21890a2d16f2545f5f6d995f Marc Fournier marc.fournier@camptocamp.com 1a7831e83261194b43822004cd43adf2e5fba8bb Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/0a2b68f42d77797bfcf2137b2b60e3f78222dc6a 0a2b68f42d77797bfcf2137b2b60e3f78222dc6a

2008-12-03T15:58:17-08:00

- Added several parameters & removed others - Corrected behaviour to make type respect dependencies 117c35b94d62509e2bed41721c0d5b50c95c86c1 Marc Fournier marc.fournier@camptocamp.com Marc Fournier marc.fournier@camptocamp.com http://github.com/camptocamp/puppet-iptables/commit/1a7831e83261194b43822004cd43adf2e5fba8bb 1a7831e83261194b43822004cd43adf2e5fba8bb

2008-12-03T15:38:16-08:00

Initial import from bzr revno 169 into github. 33a1ab1ed6db10650d53fbbb03d0dd3bf8d3a6de Marc Fournier marc.fournier@camptocamp.com