<!--
Thank you for contributing to this project!
-->
Add options:
* outerface
(iptables --out-interface
)
* to_source
(iptables --to-source
)
* to_destination
(iptables --to-destination
)
Fixes #74
<!--
Thank you for contributing to this project!
-->
<!--
Replace this comment with a description of your pull request.
-->
<!--
Replace this comment with the list of issues or n/a.
Use format:
Fixes #123
Fixes #124
-->
This PR adds match
parameter to ipset
resource to enable matching dst
against ipsets.
By default it's value is src
thus making it (backwards) compatible with existing configurations
Add ferm::ipsets
parameter to enable configuration of ferm::ipset
resources via Hiera.
It's basically the same as ferm::rules
and ferm::chains
.
<!--
Thank you for contributing to this project!
-->
<!--
Replace this comment with a description of your pull request.
-->
<!--
Replace this comment with the list of issues or n/a.
Use format:
Fixes #123
Fixes #124
-->