]> gitweb.fluxo.info Git - puppet-ferm.git/log
puppet-ferm.git
4 years agoMerge pull request #144 from voxpupuli/modulesync master
Romain Tartière [Wed, 15 Dec 2021 23:51:37 +0000 (13:51 -1000)]
Merge pull request #144 from voxpupuli/modulesync

modulesync 5.1.0

4 years agomodulesync 5.1.0
Tim [Wed, 15 Dec 2021 19:11:36 +0000 (20:11 +0100)]
modulesync 5.1.0

4 years agoMerge pull request #143 from voxpupuli/modulesync
Tim Meusel [Tue, 14 Dec 2021 21:11:19 +0000 (22:11 +0100)]
Merge pull request #143 from voxpupuli/modulesync

modulesync 5.1.0

4 years agomodulesync 5.1.0
Tim [Tue, 14 Dec 2021 20:45:21 +0000 (21:45 +0100)]
modulesync 5.1.0

4 years agoMerge pull request #142 from voxpupuli/modulesync
Tim Meusel [Sun, 31 Oct 2021 18:00:59 +0000 (19:00 +0100)]
Merge pull request #142 from voxpupuli/modulesync

modulesync 5.0.0

4 years agorubocop: autofix
Tim [Sun, 31 Oct 2021 17:42:03 +0000 (18:42 +0100)]
rubocop: autofix

4 years agomodulesync 5.0.0
Tim [Sun, 31 Oct 2021 17:23:47 +0000 (18:23 +0100)]
modulesync 5.0.0

4 years agoMerge pull request #141 from voxpupuli/modulesync
Tim Meusel [Fri, 17 Sep 2021 22:51:51 +0000 (00:51 +0200)]
Merge pull request #141 from voxpupuli/modulesync

modulesync 4.2.0

4 years agomodulesync 4.2.0
Tim [Fri, 17 Sep 2021 22:01:38 +0000 (00:01 +0200)]
modulesync 4.2.0

4 years ago[blacksmith] Bump version to 7.0.2-rc0
Tim Meusel [Thu, 26 Aug 2021 12:37:34 +0000 (14:37 +0200)]
[blacksmith] Bump version to 7.0.2-rc0

4 years agoMerge pull request #140 from bastelfreak/rel701
Tim Meusel [Thu, 26 Aug 2021 12:36:57 +0000 (14:36 +0200)]
Merge pull request #140 from bastelfreak/rel701

Release 7.0.1

4 years agoRelease 7.0.1
Tim Meusel [Thu, 26 Aug 2021 12:07:40 +0000 (14:07 +0200)]
Release 7.0.1

4 years agoMerge pull request #139 from voxpupuli/modulesync
Tim Meusel [Thu, 26 Aug 2021 10:02:34 +0000 (12:02 +0200)]
Merge pull request #139 from voxpupuli/modulesync

modulesync 4.2.0

4 years agomodulesync 4.2.0
Tim Meusel [Thu, 26 Aug 2021 08:38:24 +0000 (10:38 +0200)]
modulesync 4.2.0

4 years agoMerge pull request #138 from voxpupuli/stdlib
Tim Meusel [Thu, 26 Aug 2021 06:51:40 +0000 (08:51 +0200)]
Merge pull request #138 from voxpupuli/stdlib

Allow stdlib 8.0.0

4 years agoFix CI
Romain Tartière [Thu, 26 Aug 2021 00:06:34 +0000 (14:06 -1000)]
Fix CI

4 years agoAllow stdlib 8.0.0
Romain Tartière [Wed, 25 Aug 2021 17:41:14 +0000 (07:41 -1000)]
Allow stdlib 8.0.0

4 years ago[blacksmith] Bump version to 7.0.1-rc0
Tim Meusel [Mon, 26 Jul 2021 19:53:37 +0000 (21:53 +0200)]
[blacksmith] Bump version to 7.0.1-rc0

4 years agoMerge pull request #137 from bastelfreak/rel700
Tim Meusel [Mon, 26 Jul 2021 19:53:04 +0000 (21:53 +0200)]
Merge pull request #137 from bastelfreak/rel700

release 7.0.0

4 years agorelease 7.0.0
Tim Meusel [Mon, 26 Jul 2021 17:54:55 +0000 (19:54 +0200)]
release 7.0.0

4 years agoMerge pull request #136 from bastelfreak/deps
Tim Meusel [Mon, 26 Jul 2021 16:37:35 +0000 (18:37 +0200)]
Merge pull request #136 from bastelfreak/deps

allow latest dependencies

4 years agoallow latest dependencies
Tim Meusel [Mon, 26 Jul 2021 15:40:15 +0000 (17:40 +0200)]
allow latest dependencies

4 years agoMerge pull request #135 from voxpupuli/systemd_voxpupuli
Tim Meusel [Sat, 24 Jul 2021 15:01:32 +0000 (17:01 +0200)]
Merge pull request #135 from voxpupuli/systemd_voxpupuli

allow switch from camptocamp/systemd to voxpupuli/systemd

4 years agoswitch from camptocamp/systemd to voxpupuli/systemd
Tim Meusel [Sat, 24 Jul 2021 13:21:48 +0000 (15:21 +0200)]
switch from camptocamp/systemd to voxpupuli/systemd

4 years agoMerge pull request #134 from bastelfreak/old
Tim Meusel [Fri, 16 Jul 2021 19:46:45 +0000 (21:46 +0200)]
Merge pull request #134 from bastelfreak/old

delete legacy `policy` param in ferm::rule

4 years agodelete legacy `policy` param in ferm::rule
Tim Meusel [Fri, 16 Jul 2021 17:31:42 +0000 (19:31 +0200)]
delete legacy `policy` param in ferm::rule

4 years ago[blacksmith] Bump version to 6.0.1-rc0
Tim Meusel [Tue, 29 Jun 2021 07:33:57 +0000 (09:33 +0200)]
[blacksmith] Bump version to 6.0.1-rc0

4 years agoMerge pull request #133 from bastelfreak/rel600
Tim Meusel [Tue, 29 Jun 2021 07:33:26 +0000 (09:33 +0200)]
Merge pull request #133 from bastelfreak/rel600

release 6.0.0

4 years agorelease 6.0.0
Tim Meusel [Mon, 28 Jun 2021 15:24:19 +0000 (17:24 +0200)]
release 6.0.0

4 years agoMerge pull request #132 from bastelfreak/package
Tim Meusel [Mon, 28 Jun 2021 13:56:16 +0000 (15:56 +0200)]
Merge pull request #132 from bastelfreak/package

Enable users to the package ensure

4 years agoEnable users to the package ensure
Tim Meusel [Mon, 28 Jun 2021 12:31:43 +0000 (14:31 +0200)]
Enable users to the package ensure

4 years agoMerge pull request #127 from rehanone/support-for-opensuse
Tim Meusel [Mon, 28 Jun 2021 12:45:25 +0000 (14:45 +0200)]
Merge pull request #127 from rehanone/support-for-opensuse

Add support for opensuse

4 years agoAdd support for opensuse
Rehan Mahmood [Sat, 1 May 2021 16:27:46 +0000 (12:27 -0400)]
Add support for opensuse

This however can only be done using `install_method = vcsrepo` as the ferm itself is not in the OS repos.

4 years agoMerge pull request #130 from bastelfreak/psh
Tim Meusel [Mon, 28 Jun 2021 12:09:37 +0000 (14:09 +0200)]
Merge pull request #130 from bastelfreak/psh

puppetlabs_spec_helper: Allow 3.x

4 years agopuppetlabs_spec_helper: Allow 3.x
Tim Meusel [Mon, 28 Jun 2021 11:58:48 +0000 (13:58 +0200)]
puppetlabs_spec_helper: Allow 3.x

4 years agoMerge pull request #129 from bastelfreak/package
Tim Meusel [Mon, 28 Jun 2021 11:57:40 +0000 (13:57 +0200)]
Merge pull request #129 from bastelfreak/package

enhance spec coverage

4 years agoenhance spec coverage
Tim Meusel [Mon, 28 Jun 2021 09:50:34 +0000 (11:50 +0200)]
enhance spec coverage

4 years agoMerge pull request #128 from voxpupuli/modulesync
Tim Meusel [Mon, 28 Jun 2021 10:06:27 +0000 (12:06 +0200)]
Merge pull request #128 from voxpupuli/modulesync

modulesync 4.1.0

4 years agorubocop: autofix
Tim Meusel [Mon, 28 Jun 2021 10:01:50 +0000 (12:01 +0200)]
rubocop: autofix

4 years agomodulesync 4.1.0
Tim Meusel [Mon, 28 Jun 2021 09:53:23 +0000 (11:53 +0200)]
modulesync 4.1.0

4 years agoMerge pull request #121 from kBite/allow-integer-protocols
kBite [Tue, 16 Feb 2021 15:38:38 +0000 (16:38 +0100)]
Merge pull request #121 from kBite/allow-integer-protocols

Allow numeric values as protocol references

4 years agoadd Integer as data type to rule.pp's selector statement
Kilian Engelhardt [Thu, 4 Feb 2021 18:00:44 +0000 (19:00 +0100)]
add Integer as data type to rule.pp's selector statement

4 years agoadd test for numeric value protocols
Kilian Engelhardt [Wed, 3 Feb 2021 20:38:27 +0000 (21:38 +0100)]
add test for numeric value protocols

4 years agoadd 'Integer' to 'Ferm::Protocols' to allow numberic values
Kilian Engelhardt [Wed, 3 Feb 2021 20:32:57 +0000 (21:32 +0100)]
add 'Integer' to 'Ferm::Protocols' to allow numberic values

> The specified protocol can be one of tcp, udp, udplite, icmp, icmpv6,esp,
> ah, sctp, mh or the special keyword "all", or it can be a numeric value,
> representing one of these protocols or a different one.
source: https://ipset.netfilter.org/iptables.man.html

Also see [0] for Assigned Internet Protocol Numbers.

--
[0] https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml

4 years agoMerge pull request #119 from voxpupuli/modulesync
Tim Meusel [Tue, 9 Feb 2021 11:28:39 +0000 (12:28 +0100)]
Merge pull request #119 from voxpupuli/modulesync

modulesync 4.0.0

4 years agomodulesync 4.0.0
Tim Meusel [Wed, 25 Nov 2020 16:12:07 +0000 (17:12 +0100)]
modulesync 4.0.0

4 years agodrop unneeded manage_initfile param
Tim Meusel [Tue, 9 Feb 2021 11:18:46 +0000 (12:18 +0100)]
drop unneeded manage_initfile param

4 years agoDrop EoL CentOS 6 support
Tim Meusel [Tue, 9 Feb 2021 10:35:37 +0000 (11:35 +0100)]
Drop EoL CentOS 6 support

4 years agoDrop Puppet 5; enable Puppet 7 support
Tim Meusel [Tue, 9 Feb 2021 10:34:13 +0000 (11:34 +0100)]
Drop Puppet 5; enable Puppet 7 support

4 years agoDrop Fedora support (they dont support ferm anymore)
Tim Meusel [Tue, 9 Feb 2021 10:32:46 +0000 (11:32 +0100)]
Drop Fedora support (they dont support ferm anymore)

5 years agoMerge pull request #118 from voxpupuli/modulesync
Tim Meusel [Wed, 28 Oct 2020 19:18:04 +0000 (20:18 +0100)]
Merge pull request #118 from voxpupuli/modulesync

modulesync 3.1.0

5 years agomodulesync 3.1.0
Tim Meusel [Sat, 24 Oct 2020 17:20:02 +0000 (19:20 +0200)]
modulesync 3.1.0

5 years agoMerge pull request #117 from bastelfreak/string
Tim Meusel [Wed, 7 Oct 2020 07:42:29 +0000 (09:42 +0200)]
Merge pull request #117 from bastelfreak/string

Add puppet-lint-param-docs linter / fix typos in puppet-strings documentation

5 years agofix typos in puppet-strings documentation
Tim Meusel [Tue, 6 Oct 2020 20:41:45 +0000 (22:41 +0200)]
fix typos in puppet-strings documentation

5 years agoAdd puppet-lint-param-docs linter
Tim Meusel [Tue, 6 Oct 2020 15:24:59 +0000 (17:24 +0200)]
Add puppet-lint-param-docs linter

5 years agoMerge pull request #116 from voxpupuli/modulesync
Tim Meusel [Tue, 6 Oct 2020 16:34:20 +0000 (18:34 +0200)]
Merge pull request #116 from voxpupuli/modulesync

modulesync 3.0.0 & puppet-lint updates

5 years agopuppet-lint: autofix
Tim Meusel [Sat, 25 Jul 2020 15:41:02 +0000 (17:41 +0200)]
puppet-lint: autofix

5 years agomodulesync 3.0.0
Tim Meusel [Sat, 25 Jul 2020 12:11:29 +0000 (14:11 +0200)]
modulesync 3.0.0

5 years ago[blacksmith] Bump version to 5.0.1-rc0
Thore Bödecker [Thu, 2 Jul 2020 13:36:01 +0000 (15:36 +0200)]
[blacksmith] Bump version to 5.0.1-rc0

5 years agoMerge pull request #115 from voxpupuli/release-v5.0.0
Thore Bödecker [Thu, 2 Jul 2020 13:34:54 +0000 (15:34 +0200)]
Merge pull request #115 from voxpupuli/release-v5.0.0

Release v5.0.0

5 years agorelease v5.0.0
Thore Bödecker [Thu, 2 Jul 2020 13:32:32 +0000 (15:32 +0200)]
release v5.0.0

5 years agoMerge pull request #114 from foxxx0/fix-portrange-regression
Thore Bödecker [Thu, 2 Jul 2020 13:22:29 +0000 (15:22 +0200)]
Merge pull request #114 from foxxx0/fix-portrange-regression

implement proper sport/dport types, validate port ranges, fix some minor regressions

5 years agoadd type_aliases tests for the other ferm types
Thore Bödecker [Tue, 30 Jun 2020 15:41:09 +0000 (17:41 +0200)]
add type_aliases tests for the other ferm types

5 years agouse proper types and validations for port handling
Thore Bödecker [Thu, 25 Jun 2020 15:07:07 +0000 (17:07 +0200)]
use proper types and validations for port handling

- implement validations for port ranges
- add test cases for these scenarios

5 years agouse verbose multiport syntax for better compat
Thore Bödecker [Thu, 25 Jun 2020 15:44:26 +0000 (17:44 +0200)]
use verbose multiport syntax for better compat

The dports/sports shortcut is only supported starting with ferm v2.5 which
was released very recently.
In order to support a wider range of distributions and ferm versions,
this commits switches to the more verbose version of the multiport
features.

5 years ago[blacksmith] Bump version to 4.0.1-rc0
Thore Bödecker [Mon, 22 Jun 2020 15:05:39 +0000 (17:05 +0200)]
[blacksmith] Bump version to 4.0.1-rc0

5 years agoMerge pull request #113 from foxxx0/release-4.0.0
Thore Bödecker [Mon, 22 Jun 2020 15:03:17 +0000 (17:03 +0200)]
Merge pull request #113 from foxxx0/release-4.0.0

release 4.0.0

5 years agorelease 4.0.0
Thore Bödecker [Mon, 22 Jun 2020 14:58:12 +0000 (16:58 +0200)]
release 4.0.0

5 years agoMerge pull request #112 from foxxx0/add-multiport-support
Tim Meusel [Mon, 22 Jun 2020 14:41:05 +0000 (16:41 +0200)]
Merge pull request #112 from foxxx0/add-multiport-support

implement multiport support for dport/sport / drop string support for sport/dport

5 years agomove OpenVPN example to README.md
Thore Bödecker [Mon, 22 Jun 2020 14:39:50 +0000 (16:39 +0200)]
move OpenVPN example to README.md

This was previously manually added to REFERENCE.md and got overwritten
by a freshly generation version of that file.
The proper place for this is the README.md which is not automatically
generated.

5 years agoimplement multiport support for dport/sport
Thore Bödecker [Mon, 22 Jun 2020 13:53:06 +0000 (15:53 +0200)]
implement multiport support for dport/sport

5 years agoMerge pull request #109 from bastelfreak/ubuntu20
Tim Meusel [Tue, 19 May 2020 19:32:49 +0000 (21:32 +0200)]
Merge pull request #109 from bastelfreak/ubuntu20

Add Ubuntu 20.04 support

5 years agoMerge pull request #104 from Dan33l/install_from_sources
Tim Meusel [Mon, 18 May 2020 20:16:12 +0000 (22:16 +0200)]
Merge pull request #104 from Dan33l/install_from_sources

add install_method parameter

5 years agoadd install_method parameter
Fabien COMBERNOUS [Sat, 2 May 2020 09:32:08 +0000 (11:32 +0200)]
add install_method parameter

5 years agoMerge pull request #105 from rehanone/allow-custom-chain-rules-using-ferm-dsl
Tim Meusel [Mon, 18 May 2020 09:29:03 +0000 (11:29 +0200)]
Merge pull request #105 from rehanone/allow-custom-chain-rules-using-ferm-dsl

Allow adding custom ferm dsl for subchains. This is important for usi…

5 years agovoxpupuli-test: update 1.0.0->1.4.0
Tim Meusel [Sat, 9 May 2020 17:12:53 +0000 (19:12 +0200)]
voxpupuli-test: update 1.0.0->1.4.0

5 years agoAdd Ubuntu 20.04 support
Tim Meusel [Sat, 9 May 2020 17:12:31 +0000 (19:12 +0200)]
Add Ubuntu 20.04 support

5 years agoAllow adding custom ferm dsl for subchains. This is important for using complex iptab...
Rehan Mahmood [Mon, 4 May 2020 18:11:05 +0000 (14:11 -0400)]
Allow adding custom ferm dsl for subchains. This is important for using complex iptable rules that are currently not supported by this module or would be very hard to manage just using puppet.

5 years ago[blacksmith] Bump version to 3.0.2-rc0
Tim Meusel [Wed, 6 May 2020 19:24:12 +0000 (21:24 +0200)]
[blacksmith] Bump version to 3.0.2-rc0

5 years agoMerge pull request #108 from voxpupuli/rel301
Tim Meusel [Wed, 6 May 2020 19:23:54 +0000 (21:23 +0200)]
Merge pull request #108 from voxpupuli/rel301

release 3.0.1

5 years agorelease 3.0.1
Tim Meusel [Wed, 6 May 2020 19:07:57 +0000 (21:07 +0200)]
release 3.0.1

5 years agoMerge pull request #107 from voxpupuli/fuubuntu
Ewoud Kohl van Wijngaarden [Wed, 6 May 2020 16:13:29 +0000 (18:13 +0200)]
Merge pull request #107 from voxpupuli/fuubuntu

Ubuntu/Debian: Notify service on config changes

5 years agoUbuntu/Debian: Notify service on config changes
Tim Meusel [Wed, 6 May 2020 15:24:06 +0000 (17:24 +0200)]
Ubuntu/Debian: Notify service on config changes

Without this change it's possible that we try to start the service and
afterwards modify the debian/ubuntu specifc config file that otherwise
prevents the service from starting.

5 years agoMerge pull request #106 from voxpupuli/travis2
Tim Meusel [Tue, 5 May 2020 14:52:18 +0000 (16:52 +0200)]
Merge pull request #106 from voxpupuli/travis2

Add missing os key in travis config

5 years agotravis: Rename user to username
Tim Meusel [Tue, 5 May 2020 11:41:49 +0000 (13:41 +0200)]
travis: Rename user to username

This fixes the following travis error:

```
deploy: both user and username given, user overwrites username
```

5 years agotravis.yml: Rename matrix to jobs
Tim Meusel [Tue, 5 May 2020 11:33:05 +0000 (13:33 +0200)]
travis.yml: Rename matrix to jobs

Without this change, we get the following warning:

```
root: key matrix is an alias for jobs, using jobs
```

5 years agoAdd missing os key in travis config
Tim Meusel [Tue, 5 May 2020 11:18:20 +0000 (13:18 +0200)]
Add missing os key in travis config

without this, the travis linter tells us the following warning:

```
root: missing os, using the default linux
```

5 years ago[blacksmith] Bump version to 3.0.1-rc0
Tim Meusel [Tue, 21 Apr 2020 13:13:22 +0000 (15:13 +0200)]
[blacksmith] Bump version to 3.0.1-rc0

5 years agoMerge pull request #102 from bastelfreak/rel300
Tim Meusel [Tue, 21 Apr 2020 13:09:14 +0000 (15:09 +0200)]
Merge pull request #102 from bastelfreak/rel300

release 3.0.0

5 years agorelease 3.0.0
Tim Meusel [Tue, 21 Apr 2020 12:55:34 +0000 (14:55 +0200)]
release 3.0.0

5 years agoMerge pull request #101 from bastelfreak/log
Tim Meusel [Tue, 21 Apr 2020 12:53:12 +0000 (14:53 +0200)]
Merge pull request #101 from bastelfreak/log

by default dont log dropped packets

5 years agoby default dont log dropped packets
Tim Meusel [Tue, 21 Apr 2020 12:08:29 +0000 (14:08 +0200)]
by default dont log dropped packets

5 years agoMerge pull request #100 from bastelfreak/invalid
Tim Meusel [Tue, 21 Apr 2020 12:05:26 +0000 (14:05 +0200)]
Merge pull request #100 from bastelfreak/invalid

make dropping of invalid pakets optional

5 years agomake dropping of pakets marked as invalid optional
Tim Meusel [Wed, 15 Apr 2020 07:57:09 +0000 (09:57 +0200)]
make dropping of pakets marked as invalid optional

5 years agoMerge pull request #90 from Dan33l/add_conntrack_dedicated
Tim Meusel [Tue, 21 Apr 2020 11:12:47 +0000 (13:12 +0200)]
Merge pull request #90 from Dan33l/add_conntrack_dedicated

use dedicated conntrack parameters / by default disable conntrack for new chains /  by default enable conntrack for filter INPUT chain

5 years agouse dedicated conntrack parameters
Fabien COMBERNOUS [Fri, 1 Nov 2019 13:12:30 +0000 (14:12 +0100)]
use dedicated conntrack parameters

5 years agoMerge pull request #99 from bastelfreak/docs
Tim Meusel [Fri, 10 Apr 2020 21:58:04 +0000 (23:58 +0200)]
Merge pull request #99 from bastelfreak/docs

cleanup puppet-strings documentation

5 years agocleanup puppet-strings documentation
Tim Meusel [Thu, 9 Apr 2020 06:58:16 +0000 (08:58 +0200)]
cleanup puppet-strings documentation

5 years agoMerge pull request #97 from voxpupuli/rewrite-acceptance-tests
Tim Meusel [Tue, 7 Apr 2020 14:33:29 +0000 (16:33 +0200)]
Merge pull request #97 from voxpupuli/rewrite-acceptance-tests

Use voxpupuli-acceptance

5 years agoUse voxpupuli-acceptance
Ewoud Kohl van Wijngaarden [Mon, 6 Apr 2020 21:10:52 +0000 (23:10 +0200)]
Use voxpupuli-acceptance