search

puppetlabs / puppetlabs-firewall

Puppet Firewall Module
http://forge.puppetlabs.com/puppetlabs/firewall
Apache License 2.0
275 stars 458 forks source link

Add ability to set match_mark|connmark as a mark/mask value #1211

Closed 2fa closed 1 month ago

2fa commented 7 months ago

Summary

You should be able to set mark|connmark as a mark/mask. This PR add support of that.

Related Issues (if any)

1198

Checklist

absld commented 2 months ago

Any updates on this? I'm struggling with some foreign iptables rules created by k3s setup which include a mark match

absld commented 2 months ago

Can confirm that the issue is solved with 4354dd8 from @2fa

span786 commented 1 month ago

We will be adding the changes mentioned in this PR in https://github.com/puppetlabs/puppetlabs-firewall/pull/1238.