Resource Type: iptables_optimize

Defined in:
lib/puppet/type/iptables_optimize.rb
Providers:
optimize

Overview

The path to the target file to be optimized. Mainly used for ensuring that the file comes after the optimization.

Properties

  • optimize (defaults to: true)

    Whether or not to optimize

    Supported values:
    • true
    • false

Parameters

  • disable (defaults to: false)

    This is a way to authoritatively disable the application of the iptables module.

    Supported values:
    • true
    • false
  • ignore

    Ignore all running iptables rules matching one or more provided Ruby regexes. The regexes are compared against both the jump and chain options of the running rules and excluded from the synchronization comparison against the new rules. Do not include the beginning and ending slashes in your regular expressions.

    NOTE: If a rule has been added or removed, this setting ignored and iptables will be restarted! If you have services which are affected by this, make sure that they subscribe to Service and/or Service as appropriate.

    Examples: # Preserve all rules whose jump or chain begins with the word 'foo' ignore => '^foo'

    # Preserve all rules whose jump or chain begins with the word 'foo' or # ends with the word 'bar' ignore => ['^foo','bar$']

  • name (namevar)

    The path to the target file to be optimized. Mainly used for ensuring that the file comes after the optimization.