__iptables*: Update manpages for execution order

To make some thinks clear if someone needs it ..
This commit is contained in:
matze 2020-12-02 18:22:31 +01:00
parent bee255c1ae
commit a1db5c3d0e
2 changed files with 14 additions and 0 deletions

View file

@ -19,6 +19,16 @@ the subfolder ``all/`` are applied to both rule tables. All
files contain the arguments for a single ``iptables`` and/or files contain the arguments for a single ``iptables`` and/or
``ip6tables`` command. ``ip6tables`` command.
Rules are applied in the following order:
1. All IPv4 rules
2. All IPv6 rules
2. All rules that should be applied to both tables
The order of the rules that will be applied are definite
from the result the shell glob returns, which should be
alphabetical. If rules must be applied in a special order,
prefix them with a number like ``02-some-rule``.
REQUIRED PARAMETERS REQUIRED PARAMETERS
------------------- -------------------

View file

@ -11,6 +11,10 @@ DESCRIPTION
This cdist type allows you to manage iptable rules This cdist type allows you to manage iptable rules
in a distribution independent manner. in a distribution independent manner.
See :strong:`cdist-type__iptables_apply`\ (7) for the
execution order of these rules. It will be executed
automaticly to apply all rules non-volaite.
REQUIRED PARAMETERS REQUIRED PARAMETERS
------------------- -------------------