]> review.fuel-infra Code Review - puppet-modules/puppetlabs-firewall.git/commit
Code Review / puppet-modules / puppetlabs-firewall.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: ee11737) | patch
(MODULES-2119) iptables delete -p all exception
authorMikker Gimenez-Peterson <mikker@puppet.com>
Thu, 21 Dec 2017 02:44:37 +0000 (18:44 -0800)
committerMikker Gimenez-Peterson <mikker@puppet.com>
Thu, 21 Dec 2017 02:44:37 +0000 (18:44 -0800)
commit680738164865a01f554d1e1037c8d8724e39a720
tree1a35fdea247e246003944e6635897bee995e039dtree | snapshot
parentee1173712870accaeaaaad05794e43e78f8b4fb7commit | diff
(MODULES-2119) iptables delete -p all exception

This change works around a bug in ip6tables where rules will not be deleted if they attempt to match the 'all' protocol, as it does not properly handle a missing protocol field as an implicit 'all':

netfilter bug located here: https://bugzilla.netfilter.org/show_bug.cgi?id=1015
lib/puppet/provider/firewall/iptables.rb diff | blob | history
spec/unit/puppet/provider/iptables_spec.rb diff | blob | history