Commit graph

38 commits

Author SHA1 Message Date
Mike Liu
582e36aef9 Iptables enhancements (#2789)
* Add the flush parameter.

When specified the flush parameter indicates that this module should remove all
rules from the specified table. If no table parameter is specified then the
default filter table is flushed.

* Add support for setting chain policies.

The module supports setting the policy of a given chain and table to the
following target values, ACCEPT, DROP, QUEUE, and RETURN. This parameter ignores
all other unrelated parameters.

* Fix pep8 issues.

* Fix missing quotation.

* Make 'flush' and 'policy' parameters mutually exclusive.

This combination is not supported by the wrapped iptables command. 'flush' and
'policy' however, can both take the 'chain' argument.
2016-08-30 16:16:10 +02:00
Linus Unnebäck
344dcc95c0 iptables: remove duplicated documentation (#2673)
Fixes #1527
2016-08-05 09:26:30 -04:00
Elena Washington
3ca06bf1c8 iptables: option to configure Source NAT (#2292)
* Clean up trailing whitespace

* Add `--to-source` option to allow Source NAT (fix for #2291)
2016-05-26 09:51:31 -07:00
Daniel Vigueras
735c1b6219 Add insert support to iptables. (#1180)
Add insert support to iptables.
2016-05-16 16:25:52 -04:00
Pavel Samokha
a0566037b4 iptables module - icmp-type better doc style 2016-05-13 17:14:44 +03:00
Pavel Samokha
7092118119 fix icmp-type 2016-05-13 16:49:58 +03:00
Pavel Samokha
747f6f6736 iptables module - add icmp_type 2016-05-13 15:52:49 +03:00
Aaron Brady
e2138c7e14 Add to_destination parameter 2016-04-06 11:30:59 +01:00
David Hocky
031f98e86c fix dscp marking documentation in iptables module 2016-03-31 18:37:37 -04:00
Pavel Sychev
eda178a988 Added version restriction for uid_owner and reject_with. 2016-03-23 13:46:50 +03:00
Pavel Sychev
c15dcf888b Added docs for reject_with and uid_owner. 2016-03-23 10:48:31 +03:00
Pavel Sychev
12890b14b2 Added reject_with and uid_owner support. 2016-03-23 10:46:53 +03:00
Rene Moser
cd3daf5763 iptables: add defaults to docs 2016-03-16 19:06:56 +01:00
David Hocky
404267b064 add version added to new params 2016-03-09 11:20:34 -05:00
David Hocky
b89f0f44d0 fix doc issue 2016-03-09 11:16:27 -05:00
David Hocky
c9e3c57ee9 add support for setting dscp marks with iptables module 2016-03-09 11:04:58 -05:00
Brian Coca
cd64f20034 added missing version_added 2016-02-01 23:55:41 -05:00
Brian Coca
ff554a76d7 Merge pull request #1402 from doalitic/iptables-add-limit-burst
Add limit-burst support to iptables module
2016-02-01 23:50:15 -05:00
Daniel Vigueras
16d17d287f iptables: fix param check in append_csv function 2016-01-18 16:11:13 +01:00
Daniel Vigueras
ece6872b81 iptables: add --limit-burst option 2016-01-18 16:00:09 +01:00
Brian Coca
aae5847064 Merge pull request #1403 from LinusU/linusu-iptables-cleanup
iptables: cleanup
2016-01-14 11:04:37 -05:00
Matt Martz
9342bd7c38 Import module snippets in the correct location 2015-12-22 15:38:29 -06:00
Linus Unnebäck
cdf7fa2250 iptables: cleanup 2015-12-18 19:40:43 +01:00
Gordon Fierce
b0196edb34 Fix documentation to prevent formatting error where each letter has its own line. 2015-12-07 18:47:26 -05:00
Romain Brucker
e0bdd2e7f6 Editing iptable module to use -m state --state instead of -m conntrack --ctstate 2015-11-10 09:21:32 -06:00
Romain Brucker
2b04f0c5cf Fixing limit type from list to string 2015-11-03 11:47:28 -06:00
Romain Brucker
dbee2266e1 Adding limit feature to iptables module 2015-11-03 11:41:30 -06:00
Brian Coca
6a87eed586 made ctstate default to [] and evaluation conditional on the list being popoulated 2015-11-03 12:12:39 -05:00
Brian Coca
ea2fd78e6a fixed default from None to [] for ctstate 2015-11-03 12:03:00 -05:00
Brian Coca
f5ed8d0c6e made ctstate accept lists 2015-11-02 12:11:38 -05:00
Daniel Vigueras
b0278c1f6a Add conntrack module ctstate support to iptables 2015-11-02 10:55:54 +01:00
Brian Coca
360734ec09 whitespace fixes 2015-10-31 14:31:08 -04:00
Romain Brucker
c648edfbae Adding comment support for iptables module 2015-10-30 11:29:05 -05:00
Alexander
64d5502fbe fix typo error
fix spell error for whether
2015-10-26 23:03:51 +08:00
Toshio Kuratomi
5adc4a2014 Fix docs to build 2015-10-16 10:49:23 -07:00
Linus Unnebäck
e5f2931707 iptables: add note about rules 2015-10-15 11:30:06 +02:00
Linus Unnebäck
3c4e6f58b0 iptables: expand rule options 2015-09-28 22:14:19 +02:00
Linus Unnebäck
5cd6b56453 module: system/iptables 2015-09-28 18:59:15 +02:00