- Support for filtering by source IP address
- Update
iptables_state
module and action plugin from community.general
- Missing entry for 5.0.0
- Refactor
iptables_state
module and plugin:- Add
wait
option - Better handling of tables
- Better bytes/string conversions
- Drop stateless/informative behaviour
- Improve consistency of returned results
- Improve idempotency and check mode support
- Dissociate timeouts (use
ansible_timeout
on the controller andasync
value on the target)
- Add
- Update role and tests accordingly
- 'ansible-test sanity' errors
- module's DOCUMENTATION.requirements
- vim fold markers in playbook test.yml
- Role assertions (ansible and OS compatibility)
- Test cases about rollbacks, playing with timeouts and DROP or REJECT.
- Convert loop
while
->for
based on the timeout to retrieve async result. - Move
async_dir
search/compute above and use it to build the path of the temporary backup/cookie. - Remove internal params from results when not used.
- Use ansible way to write into the destination file.
- Use bytes when interacting with filesystem.
- Rewrite template for better output formats.
- Action plugin
iptables_state
: manage the connection reset and the rollback on its own.
- Remove tasks now covered by the module (or the action plugin) and refactor all others consequently.
- Update tests.
- Ad hoc module
iptables_state
to manage saving and restoring iptables state to/from a file
- Rename
iptables_apply__timeout
toiptables_apply__rollback_timeout
- Refactor tasks to use the embedded module
- Update tests playbook
- Remove templated shell script, no more needed
- Rename
iptables_apply__noflush
toiptables_apply__template_noflush
- Move all role variables from
vars
todefaults
- Update README accordingly
- idempotency issue with quoted comments
- put shell templated commands into a dedicated file
- this changelog
- support for nft (iptables-nft)
- replace connection plugin switch by reset_connection
- rewrite tests
- rewrite tests
- scalability issue
- iptables state initialization
- ansible-lint 4.0.1
- revert to connection plugin switch (remove meta: reset_connetion
- scalability (remove
wait_for_connection
)
- rewrite test playbook
- replace connection plugin switch by a meta
reset_connection
- number inserted rules instead of reverting the order
- bump min_ansible_verion to 2.5
- action
flush
- option --noflush for
template
action - enhance documentation
- playbook for tests
- 3 variables for service management
- improve documentation
- per-rule management
- save iptables state
- manage iptables service
init role