puppetlabs-firewall icon indicating copy to clipboard operation
puppetlabs-firewall copied to clipboard

Add support for parsing and using socket parameters

Open ArsenyBelorukov opened this issue 11 months ago • 0 comments

Use Case

I've got a warning

Skipping unparsable iptables rule: keys (5) and values (6) count mismatch on line: -A CILIUM_PRE_mangle -m socket --transparent -m comment --comment "cilium: any->pod redirect proxied traffic to host proxy" -j MARK --set-xmark 0x200/0xffffffff

because the socket module's --transparent option is not parsed correctly.

According to the documentation there are two options: --transparent and --nowildcard

Describe the Solution You Would Like

Please add support for parsing and using the socket's module parameters

ArsenyBelorukov avatar Mar 13 '24 10:03 ArsenyBelorukov