Add support for --src-type and --dst-type
authorNick Stenning <nick.stenning@digital.cabinet-office.gov.uk>
Fri, 14 Jun 2013 11:08:38 +0000 (12:08 +0100)
committerNick Stenning <nick.stenning@digital.cabinet-office.gov.uk>
Fri, 14 Jun 2013 11:08:38 +0000 (12:08 +0100)
commit1890e0a30232cc05af840a2a0343756e06c76862
treeb4fa6132e306f53d365e8b0acc23f5dce29471dc
parent3cfe270e916a8b3649aa4ef13a574ac9125285ca
Add support for --src-type and --dst-type

Add support for filtering by source and destination address types. Supported by
iptables only, this feature allows filtering packets by the address type (such
as whether the packet came from a local address, a broadcast address, a
multicast address, etc).

Adds the `:address_type` feature to allow a provider to declare support for
filtering on the basis of address type.
lib/puppet/provider/firewall/iptables.rb
lib/puppet/type/firewall.rb
spec/fixtures/iptables/conversion_hash.rb
spec/unit/puppet/type/firewall_spec.rb