linux-system-roles / firewall

Configure firewalld and system-config-firewall
https://linux-system-roles.github.io/firewall/
GNU General Public License v2.0
57 stars 32 forks source link

creating ipset #106

Closed sugitk closed 1 year ago

sugitk commented 1 year ago

What would you like to be added:

I would like to run the command like "firewall-cmd --new-ipset=foobar --permanent --type=hash:ip" in a playbook rather than using a command module.

Why is this needed:

The customer requested in the technical support channel.

myllynen commented 1 year ago

Yes, I think having the role to support ipsets would make it more complete. In the RHEL documentation (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/configuring_firewalls_and_packet_filters/index) ipsets are quite visible and in some cases there might be technical/performance reasons to use ipsets. Thanks.

richm commented 1 year ago

Can any of you try out the proposed PR?