Signed-off-by: Tim Smith <[email protected]>

Signed-off-by: Tim Smith <[email protected]>

Signed-off-by: Tim Smith <[email protected]>

Signed-off-by: Tim Smith <[email protected]>

For *nat and *filter and other chains that might need duplicated lines containing `:OUTPUT :INPU...

allow ipv6/esp/ah protocol passthrough for ufw

Obvious fix. (ref https://github.com/chef-cookbooks/community_cookbook_documentation/blob/master...

Update chef tested version in readme

This now matches the version used in .kitchen.yml

v2.5.2 (2016-06-02)
-------------------
* Don't issue commands when firewalld isn't active (#140...

Before issuing commands, check if firewalld is active. If the action is :disable on the firewall...

Install iptables-services on CentOS / Red Hat 7 and higher.

Fixes #131.

Closes https://github.com/chef-cookbooks/firewall/pull/137.

Release v2.5.1 (2016-05-31)
-------------------
* Protocol guard incorrectly prevents "none" pro...

- Don't write rules.v6 on ubuntu if `node['firewall']['ipv6_enabled']` is disabled

Warn when a firewall_rule resource appears to be opening all traffic. This should help avoid ina...

Fix notify_firewall attribute crashing firewall_rule provider when set to false.

to false.
* firewall_rule.notify_firewall if set to False crashes the provider
because the code...

protocol guard incorrectly prevents "none" protocol type on UFW helper.

Check the value, then use port_to_s, not the other way around.

We shouldn't reference `source_interface`, since that doesn't exist.

Fixes #123.

This adds support for the firewall rules required for using the [mobile
shell](https://mosh.mit....

When passing in a port, our string-ifying helper function was modifying the variable if it happe...

Example should have had `command :allow`, as :allow is no longer an action.

This is a backwards compatible new feature to override the default ruleset, or add additional ru...

Because of some legacy code that was fixed, we had two variables that represented the same value...

This adds support to the ufw provider so that it actually supports the
:raw command as currently...

- Rubocop had some new complaints from the latest release. Fixing those.

Ensure we support raw rules on ufw, add tests for it as well.

Fixes #113.

We should be checking the iptables command, not the resource action here.

RE: #112

- Instead of accumulating the firewall rules as each `firewall_rule` resource's action fires, ac...

Fix the `port_to_s` function so it also works for Windows

Add proper Windows support & serverspec tests.

Add a flag for 'enabled' to make it easier to understand the logic on the firewall resource. We'...

- Rename `persistent` to `permanent` to match the firewalld name, and scope the attribute under ...

Added persistent option defaulted to true to allow --permament auto a…

Fixed the issue creating a firewall rule for windows with 'program' set to 'any' is invalid

Add support for using iptables in RHEL 7

Fix 'Any' program for windows firewall

Windows adv firewall consider no 'program' parameter specified as the 'Any' option:

Usage: ad...

In ipv6, ICMP is required for all kinds of basic functionality. Unless someone has overriden `al...

- Rubocop doesn't like !!
- Berkshelf 3.x has compatibility issues with Faraday/Ridley atm.

Ensure all of the distros/versions and provides blocks yield exactly one provider, no more.

RE:...

Also ensure firewalld_rule is not attempted on el6

Ensure firewalld is not attempted on el6

Update docs references to :enabled action

- Foodcritic wanted node['platform_version'] vs. :platform_version
- Add back require_relative o...

- Allow override of default iptables' filter chain's default policy, fixes #94
- Fix test-kitche...

Fixes #92 where firewall_rule misses '--to-ports'

Be sure we initialize ipv6 and ipv4 hash keys regardless of using them or not.

Fixes #91.

Per #91, add an attribute for disabling ipv6, so folks don't have to resort to resource cloning ...