puppetlabs / puppetlabs-firewall

Puppet Firewall Module
http://forge.puppetlabs.com/puppetlabs/firewall
Apache License 2.0
269 stars 455 forks source link

Add support for parsing and using socket parameters #1196

Open ArsenyBelorukov opened 3 months ago

ArsenyBelorukov commented 3 months ago

Use Case

I've got a warning

Skipping unparsable iptables rule: keys (5) and values (6) count mismatch on line: -A CILIUM_PRE_mangle -m socket --transparent -m comment --comment "cilium: any->pod redirect proxied traffic to host proxy" -j MARK --set-xmark 0x200/0xffffffff

because the socket module's --transparent option is not parsed correctly.

According to the documentation there are two options: --transparent and --nowildcard

Describe the Solution You Would Like

Please add support for parsing and using the socket's module parameters