summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMicah Anderson <micah@riseup.net>2018-03-24 16:20:29 +0100
committerMicah Anderson <micah@riseup.net>2018-03-24 16:20:29 +0100
commit00d7e707917a28816ea34589318390fe4f185c73 (patch)
tree1af1ad8c6bfbcf1ab7970015a9f3244aa1b9cb08
parent04ec5801350eb4e0b290fb0b585bfc592452c3ce (diff)
The blacklist option should not be set by default, it should only be added when
you are actually going to blacklist things. Otherwise you get this warning from shorewall_check each day: WARNING: There are interfaces or zones with the 'blacklist' option, but the 'blacklist' file is either missing or has zero size Also, the README for this module notes that this option is deprecated upstream, and so we should remove it.
-rw-r--r--manifests/interface.pp2
1 files changed, 1 insertions, 1 deletions
diff --git a/manifests/interface.pp b/manifests/interface.pp
index 4184db5..d6c3623 100644
--- a/manifests/interface.pp
+++ b/manifests/interface.pp
@@ -3,7 +3,7 @@
define shorewall::interface(
$zone,
$broadcast = 'detect',
- $options = 'tcpflags,blacklist,routefilter,nosmurfs,logmartians',
+ $options = 'tcpflags,routefilter,nosmurfs,logmartians',
$add_options = '',
$rfc1918 = false,
$dhcp = false,