New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for IPv6 hop limiting #152
Conversation
@mcanevet this needs test. Try adding rules to conversion_hash.rb to test the parser now with your new additions. |
Can one of the admins verify this patch? |
1 similar comment
Can one of the admins verify this patch? |
@kbarber I can't figure out how to limit unit tests to ip6tables provider only (as hop_limit is only relevant in IPv6). |
Can one of the admins verify this patch? |
@mcanevet someone posted a patch that contained a solution to testing in ipv6 only: https://github.com/puppetlabs/puppetlabs-firewall/pull/165/files its not merged in, but if you wanted to re-use that code that would be swell. Seems to work and passes tests etc. |
Adds tests for ipv6, too. ip6tables handles fragmentation differently. There's a special module and a couple of matchers which are all needed to implement a stateless firewall correctly. known_boolean handling with etc has been generified. The known_boolean functionality was partly tailored to the :socket feature.
On request by kbarber.
I'll close this in favour of #165. |
No description provided.