This adds support for the firewall rules required for using the [mobile
shell](https://mosh.mit....

When passing in a port, our string-ifying helper function was modifying the variable if it happe...

Example should have had `command :allow`, as :allow is no longer an action.

This is a backwards compatible new feature to override the default ruleset, or add additional ru...

Because of some legacy code that was fixed, we had two variables that represented the same value...

This adds support to the ufw provider so that it actually supports the
:raw command as currently...

- Rubocop had some new complaints from the latest release. Fixing those.

Ensure we support raw rules on ufw, add tests for it as well.

Fixes #113.

We should be checking the iptables command, not the resource action here.

RE: #112

- Instead of accumulating the firewall rules as each `firewall_rule` resource's action fires, ac...

Fix the `port_to_s` function so it also works for Windows

Add proper Windows support & serverspec tests.

Add a flag for 'enabled' to make it easier to understand the logic on the firewall resource. We'...

- Rename `persistent` to `permanent` to match the firewalld name, and scope the attribute under ...

Added persistent option defaulted to true to allow --permament auto a…

Fixed the issue creating a firewall rule for windows with 'program' set to 'any' is invalid

Add support for using iptables in RHEL 7

Fix 'Any' program for windows firewall

Windows adv firewall consider no 'program' parameter specified as the 'Any' option:

Usage: ad...

In ipv6, ICMP is required for all kinds of basic functionality. Unless someone has overriden `al...

- Rubocop doesn't like !!
- Berkshelf 3.x has compatibility issues with Faraday/Ridley atm.

Ensure all of the distros/versions and provides blocks yield exactly one provider, no more.

RE:...

Also ensure firewalld_rule is not attempted on el6

Ensure firewalld is not attempted on el6

Update docs references to :enabled action

- Foodcritic wanted node['platform_version'] vs. :platform_version
- Add back require_relative o...

- Allow override of default iptables' filter chain's default policy, fixes #94
- Fix test-kitche...

Fixes #92 where firewall_rule misses '--to-ports'

Be sure we initialize ipv6 and ipv4 hash keys regardless of using them or not.

Fixes #91.

Per #91, add an attribute for disabling ipv6, so folks don't have to resort to resource cloning ...

Work to ensure Travis CI passes

- Fix chefspec tests (needs more work)
- Correct actions in matchers
- Clean up groups in Gemfil...

- By default, allow related/established on iptables (ufw defaults to this)
- Add `default['firew...

Add ipv6 toggle for not running ipv6 commands. Fixes #73.

Rewritten to support 'Chef 12 style' for doing providers and resources, RE: #78. The new way to ...

Introduce Windows firewall support, with much thanks to @svanharmelen.

Includes work from:
http...

Add firewall resource parameters for default enabled and disabled firewalld zones.

Fixes #71.

add variable scope to svc in iptables flush.

We were appending '-A' for raw rules, for no real reason. This removes that limitation.

This will further address the issue of being able to debug positional rules.

This is a major rewrite of the firewall cookbook, however tests were only slightly adjusted to r...

insert_at attribute to insert at top or bottom.

Remove additional space after port range

Resolves #79

Bug fix: Fixed redirect comparision; cdre-security-centos64-65 …

- We don't bump versions in PRs or write changelogs here, as it creates unnecessary merge confli...