git.openstreetmap.org Git - chef.git/history - cookbooks/networking/templates/default/nftables.conf.erb

]> git.openstreetmap.org Git - chef.git/history - cookbooks/networking/templates/default/nftables.conf.erb

[chef.git] / cookbooks / networking / templates / default / nftables.conf.erb

2023-03-18	Tom Hughes	Merge interface families	blob \| commitdiff \| raw
2023-03-11	Tom Hughes	Generalise configuration of firewall sets	blob \| commitdiff \| raw \| diff to current
2023-03-11	Tom Hughes	Fix newline suppression in ERB template	blob \| commitdiff \| raw \| diff to current
2023-03-08	Tom Hughes	Don't filter outgoing multicast packets	blob \| commitdiff \| raw \| diff to current
2023-03-07	Tom Hughes	Fix icmp echo rate limiting	blob \| commitdiff \| raw \| diff to current
2023-03-07	Tom Hughes	Reintroduce helper support and implement it	blob \| commitdiff \| raw \| diff to current
2023-03-07	Tom Hughes	Use interval sets for blocklists	blob \| commitdiff \| raw \| diff to current
2023-03-07	Tom Hughes	Rename firewall tables to avoid any clash with iptables	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Don't expire connection limit sets	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Expire rate limit sets	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Remove size limits on firewall sets	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Enable rate limits	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Allow AWS DNS queries through the firewall	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Match interfaces by name so we can start nftables befor...	blob \| commitdiff \| raw \| diff to current
2023-03-05	Tom Hughes	Limit NAT to IPv4 interfaces	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Fix typo	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Fix flag matches to work on 20.04	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Handle machines with no external interface	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Block unspecified and multicast addresses on the outside	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Limit echo on a per source basis	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Make nftables block various invalid TCP flag combinations	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Don't log rate limited echo request packets	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Avoid dropping third party tables when stopping an...	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Eliminate need for dummy addresses in when running...	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Revert "Only flush our table to avoid disrupting other...	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Only flush our table to avoid disrupting other nftables...	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Use named sets for OSM IP addresses	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Use strings for network families	blob \| commitdiff \| raw \| diff to current
2023-03-04	Tom Hughes	Add support for using an nftables based firewall	blob \| commitdiff \| raw \| diff to current

Chef configuration management public repo for configuring & maintaining the OpenStreetMap servers.

RSS Atom