puppetlabs-firewall
puppetlabs-firewall copied to clipboard
Add support for parsing and using socket parameters
Use Case
I've got a warning
Skipping unparsable iptables rule: keys (5) and values (6) count mismatch on line: -A CILIUM_PRE_mangle -m socket --transparent -m comment --comment "cilium: any->pod redirect proxied traffic to host proxy" -j MARK --set-xmark 0x200/0xffffffff
because the socket module's --transparent
option is not parsed correctly.
According to the documentation
there are two options: --transparent
and --nowildcard
Describe the Solution You Would Like
Please add support for parsing and using the socket's module parameters