projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
If the name is too long for netfilter, hash it
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
manifests
/
rule
/
simple.pp
diff --git
a/modules/ferm/manifests/rule/simple.pp
b/modules/ferm/manifests/rule/simple.pp
index
fff04a3
..
f3a058d
100644
(file)
--- a/
modules/ferm/manifests/rule/simple.pp
+++ b/
modules/ferm/manifests/rule/simple.pp
@@
-43,7
+43,12
@@
define ferm::rule::simple (
domain (<%= @real_domain.join(' ') %>) {
table <%= @table %> {
<%-
domain (<%= @real_domain.join(' ') %>) {
table <%= @table %> {
<%-
+ # netfilter chain names are limited to 28 characters, so if name is too long, we'll have to do something about that
name = @name
name = @name
+ if name.size > 20 then
+ require 'digest'
+ name = 'dgst-' + Digest::SHA256.hexdigest(name)[0,15]
+ end
tail = "jump #{@target}"
-%>
<%=
tail = "jump #{@target}"
-%>
<%=