summaryrefslogtreecommitdiff
path: root/manifests
AgeCommit message (Collapse)Author
2017-11-22Don't pass $ensure parameter to concat::fragmentJerome Charaoui
It has been removed in the latest version of puppetlabs-concat
2017-02-24Merge branch 'avoid-duplicate-package-definition' into 'master' Micah
Use ensure_packages, to avoid duplicate definition in case Package['shorewall'] is defined elsewhere already. See merge request !10
2017-02-20update URLs to new working upstream locationsMatt Taggart
2017-02-20new stoppedrules, replaces routestoppedMatt Taggart
2017-02-14Use ensure_packages, to avoid duplicate definition in case ↵intrigeri
Package['shorewall'] is defined elsewhere already.
2017-02-10remove deprecated rfc1918 fileMatt Taggart
this hasn't been supported since 3.x days
2017-02-10remove deprecated norfc1918 optionMatt Taggart
It was deprecated in 4.2.0 http://www.shorewall.net/upgrade_issues.htm
2017-02-10remove deprecated blacklistMatt Taggart
the blacklist file was deprecated by upstream in 4.5.7, remove all references to them. Debian wheezy shipped with 4.5.5.3-3 (but could use a backport) and jessie has 4.6.4.3-2 currently.
2017-02-09correct decisionmh
2017-02-09cherry pick fixes for 5.xmh
Conflicts: manifests/rule_section.pp
2017-02-09* Fix typoLebedev Vadim
2017-02-09* Add exampleLebedev Vadim
2017-02-09* Add shorewall-blrules supportLebedev Vadim
2017-02-09* fix rule sectionLebedev Vadim
2016-06-11[bug] Augeas is still neededvarac
Without including `augeas` puppet would complain: Error: Could not find resource 'Class[Augeas]' for relationship on 'Class[Shorewall::Base]' on node default
2015-12-05linting for future parsermh
2015-12-05check shorewall daily on problems to alert if a rule won't compilemh
2015-12-05lintingmh
2015-12-05make service restart more failsafemh
2015-12-05add razor rulesmh
2015-12-05make it possible to create resources from hieramh
2015-12-05DeprecatedSylvain Veyrié
2015-12-05Non string mode is now deprecatedSylvain Veyrié
2015-12-05fix the missing includemh
2015-12-05get rid off lsb factsmh
2015-12-05indentationmh
2015-12-05there might be people who don't have a stun servermh
2015-12-05lintingmh
2015-12-05a cleaner namingmh
2015-12-05add rule for stuno
2015-12-05add rule for openvpno
2015-12-05manage new and legacy ports of managesievemh
2015-12-05add rules for pyzormh
2015-12-05make it easier to override behaviour of the dns rulesmh
2015-12-05fix definemh
2015-12-05migrate ipsec rules to a define so we can specify multiple zonesmh
2015-12-05only manage the config_path if we do not manage the config filemh
2015-12-05use the centos class on centos based systemsmh
2015-12-05with the latest updates on EL6 this is neededmh
2015-11-28Merge branch 'master' into 'master' ng
Remove 'require augeas' (#4396) Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility. See merge request !3
2015-07-16shorewall::rules::libvirt::host: adjust to changes in shorewall::mangle.intrigeri
That is, make the resource's title more unique by including the destination interface in it, and accordingly pass the desired action via the new, dedicated parameter.
2015-07-16shorewall::mangle: allow specifying the ACTION explicitly.intrigeri
Previously, it was using $name, which prevented adding multiple mangle rules that share a common ACTION, with different parameters.
2015-05-19provide a class ordering hint for augeas setupMicah Anderson
2015-05-19Remove 'require augeas' (#4396)Micah Anderson
Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility.
2015-05-08Make sure MUNINCOLLECTOR join() gets an array in munin ruleJerome Charaoui
2015-03-02Merge branch 'bugfix/Fix_DHCP_for_libvirt' into 'master'Jerome Charaoui
Fix dhcp for libvirt This branch uses the mangle table support added by the feature/Add_support_for_mangle_table branch to fix the libvirt DHCP when broken by recent kernel. It fills the checksum of this kind of packets on the libvirt interface. This patch shouldn't break older setup, and is implemented so that it can be disabled. See merge request !2
2015-02-27Fix DHCP from $vmz.bertagaz
On newer kernel (tested on 3.16), the libvirt and shorewall iptables rules have conflicts that need to be fixed by enabling back --checksum-fill on $vmz, otherwise the VMs can't get a DHCP lease.
2015-02-27Add support for the mangle table.bertagaz
2013-06-14Merge remote-tracking branch 'intrigeri/feature/libvirt-host'Micah Anderson
2013-03-23lintingmh