Harald Jensås 68ec102343 Support 'ipversion' property in rules ... The firewall role incorrectly used the 'proto' field in a rule as a conditional to decide if the rule should be created in iptables|ip6tables (or both). When proto was 'ipv6' the rule was not created in iptables, and when proto was 'ipv4' the rule was not created in ip6tables. When the proto field have 'ipv4' or 'ipv6' it is to create rules for ip-in-ip encapsulation. Encapsulating ipv4 in ipv6 or vice-versa is a valid usecase. This change adds the 'ipversion' property for rules. Closes-Bug: #1845170 Change-Id: I4b3463f27714721b2252640d8714da820da2eed6		2019-09-24 16:55:39 +02:00
..
main.yml	Import default rules and sort rules	2019-09-08 16:55:40 +00:00
tripleo_firewall_add.yml	Support 'ipversion' property in rules	2019-09-24 16:55:39 +02:00
tripleo_firewall_state.yml	Add firewall pruning and protocal parsing	2019-08-22 10:33:41 -05:00