by default dont log dropped packets

diff --git a/REFERENCE.md b/REFERENCE.md
index ec71f8f5bfba2ad6b2926d5455d0ae31c2a09150..2d0a4e3f318a8adfdc6d9f1f082a520c35dc158a 100644 (file)
--- a/REFERENCE.md
+++ b/REFERENCE.md
@@ -269,6 +269,8 @@ Data type: `Boolean`
 
 Enable/Disable logging of packets to the kernel log, if no explicit chain matched
 
+Default value: `false`
+
 ##### `policy`
 
 Data type: `Optional[Ferm::Policies]`

diff --git a/manifests/chain.pp b/manifests/chain.pp
index 54eb455976732a894d97ca3f39374448ff1ffcb7..ed581266089a5c524e76cc8697377a089e87e308 100644 (file)
--- a/manifests/chain.pp
+++ b/manifests/chain.pp
@@ -19,7 +19,7 @@
 # @param ip_versions Set list of versions of ip we want ot use.
 #
 define ferm::chain (
-  Boolean $log_dropped_packets,
+  Boolean $log_dropped_packets                 = false,
   Boolean $drop_invalid_packets_with_conntrack = false,
   Boolean $disable_conntrack                   = true,
   String[1] $chain                             = $name,