Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Browse files

(#10025) Make tcp_flags support a feature.

  • Loading branch information...
commit f4bb06c4ac71b432b05c1c55cfd2039e97223661 1 parent 68f13c0
@kbarber kbarber authored
View
2  lib/puppet/provider/firewall/ip6tables.rb
@@ -12,6 +12,8 @@
has_feature :reject_type
has_feature :log_level
has_feature :log_prefix
+ has_feature :mark
+ has_feature :tcp_flags
commands :iptables => '/sbin/ip6tables'
commands :iptables_save => '/sbin/ip6tables-save'
View
1  lib/puppet/provider/firewall/iptables.rb
@@ -18,6 +18,7 @@
has_feature :log_level
has_feature :log_prefix
has_feature :mark
+ has_feature :tcp_flags
commands :iptables => '/sbin/iptables'
commands :iptables_save => '/sbin/iptables-save'
View
3  lib/puppet/type/firewall.rb
@@ -32,6 +32,7 @@
feature :log_level, "The ability to control the log level"
feature :log_prefix, "The ability to add prefixes to log messages"
feature :mark, "Set the netfilter mark value associated with the packet"
+ feature :tcp_flags, "The ability to match on particular TCP flag settings"
# provider specific features
feature :iptables, "The provider provides iptables features."
@@ -213,7 +214,7 @@ def should_to_s(value)
end
# tcp-specific
- newproperty(:tcp_flags) do
+ newproperty(:tcp_flags, :required_features => :tcp_flags) do
desc <<-EOS
Match when the TCP flags are as specified.
Is a string with a list of comma-separated flag names for the mask,
Please sign in to comment.
Something went wrong with that request. Please try again.