configpolicy/roles
Dustin b83e832df9 roles/dch-gw: Explicitly accept forwarded ports
Marking packets matching port-forwarding rules, and then allowing
traffic carrying that mark did not seem to work well. Often, packets
seemed to get dropped for no apparent reason, and outside connections to
NAT'd services was sometimes slow as a result. Explicitly listing every
destination host/port in the `forward` table seems to resolve this
issue.
2018-04-06 20:13:03 -05:00
..
base roles/base: Basic config management support 2018-01-29 15:02:10 -06:00
dch-gw roles/dch-gw: Explicitly accept forwarded ports 2018-04-06 20:13:03 -05:00
dhcpcd dhcpd: Install and configure ISC DHCPD 2018-03-27 20:44:43 -05:00
dhcpd dhcpd: Install and configure ISC DHCPD 2018-03-27 20:44:43 -05:00
kerberos roles/kerberos: Configure mit-krb5 2018-01-29 15:05:51 -06:00
named roles/named: Support global forwarders 2018-04-06 20:11:08 -05:00
nftables roles/nftables: Basic nftables configuration 2018-03-27 20:44:43 -05:00
nsswitch roles/nsswitch: Configure glibc name service 2018-03-11 18:16:17 -05:00
radvd radvd: Install and configure radvd 2018-03-27 20:44:43 -05:00
rhel-network roles/rhel-network: Add static route support 2018-03-27 20:44:43 -05:00
samba roles/samba: Basic Samba configuration 2018-03-11 18:16:17 -05:00
samba-dc samba-dc: Configure samba4 winbind 2018-03-11 18:16:17 -05:00
sudo roles/sudo: Configure sudo and policy 2018-03-11 18:16:17 -05:00
system-auth roles/system-auth: Configure PAM system authentication 2018-03-11 18:16:17 -05:00
winbind roles/winbind: Configure Samba AD membership 2018-03-11 18:16:17 -05:00