GitHub puppet-ferm
Puppet module to manage the ferm firewall tooling

Repo Checks ( 12 of 17 successfull )
Metadata Valid
No translation
passed
Correct Puppet Version Range
Supported Puppet version range is %{PUPPET_SUPPORT_RANGE}
passed
With Puppet Version Range
Puppet version range is present in requirements in metadata.json
passed
With Operatingsystem Support
No translation
passed
Supports Only Current Centos
No translation
failed
Supports Latest Centos
No translation
failed
Supports Only Current Ubuntu
No translation
failed
Supports Latest Ubuntu
No translation
passed
Supports Only Current Debian
No translation
failed
Supports Latest Debian
No translation
failed
In Modulesync Repo
Is listed as a module managed using modulesync_config
passed
Synced
Has a .msync.yml file
passed
Latest Modulesync
Has been synchronized with the latest tagged version of modulesync_config
passed
Has Modulesync
Is present in voxpupuli/modulesync_config/managed_modules.yml
passed
Released
Is in modulesync_config and in forge releases.
passed
Valid Sync File
If a (optional) sync file is present, it must not contain a `.travis.yml` entry.
passed
Reference Dot Md
The repository has a REFERENCE.md. It needs to be generated / puppet-strings documentation is missing.
passed

Open Pull Requests

Add ferm::rule parameters `outerface`, `to_source` and `to_destination`.
enhancement
tests-fail

<!--
Thank you for contributing to this project!

-->

Pull Request (PR) description

Add options:
* outerface (iptables --out-interface)
* to_source (iptables --to-source)
* to_destination (iptables --to-destination)

This Pull Request (PR) fixes the following issues

Fixes #74

Open PR in GitHub
add 'ipsets' hash to configure 'ferm::ipset' resource via Hiera
enhancement
needs-tests

Add ferm::ipsets parameter to enable configuration of ferm::ipset resources via Hiera.

It's basically the same as ferm::rules and ferm::chains.

Open PR in GitHub
Add `match` parameter to `ipset` resource to enable matching `dst` against ipsets
enhancement
needs-tests

This PR adds match parameter to ipset resource to enable matching dst against ipsets.

By default it's value is src thus making it (backwards) compatible with existing configurations

Open PR in GitHub