greatflyingsteve

Although passing `jump => 'SYNPROXY'` is currently allowed already, the [SYNPROXY target extension](https://ipset.netfilter.org/iptables-extensions.man.html) moves a lot of work normally performed by the kernel's TCP stack out into netfilter, and as...

## Use Case The puppetlabs-firewall module not only cannot create rules which use the SYNPROXY target extension, it is also confused if it encounters them, and produces a "Skipping unparseable...