diff --git a/README.md b/README.md index 57aff86..c848c72 100644 --- a/README.md +++ b/README.md @@ -31,6 +31,8 @@ Highly inspired by [Mike Gleason firewall role][mikegleasonjr firewall github] ( * **nft_input_conf_content** : Template used to generate the previous input configuration file [default : `etc/nftables.d/filter-input.nft.j2`]. * **nft_output_conf_path** : Output configuration file include in main configuration file [default : `{{ nft_conf_dir_path }}/filter-output.nft`]. * **nft_output_conf_content** : Template used to generate the previous output configuration file [default : `etc/nftables.d/filter-output.nft.j2`]. +* **nft_forward_conf_path** : forward configuration file include in main configuration file [default : `{{ nft_conf_dir_path }}/filter-forward.nft`]. +* **nft_forward_conf_content** : Template used to generate the previous forward configuration file [default : `etc/nftables.d/filter-forward.nft.j2`]. * **nft_define_conf_path** : Vars definition file include in main configuration file [default : `{{ nft_conf_dir_path }}/defines.nft`]. * **nft_define_conf_content** : Template used to generate the previous vars definition file [default : `etc/nftables.d/defines.nft.j2`]. * **nft_sets_conf_path** : Sets and maps definition file include in main configuration file [default : `{{ nft_conf_dir_path }}/sets.nft`]. @@ -48,6 +50,11 @@ Highly inspired by [Mike Gleason firewall role][mikegleasonjr firewall github] ( * **nft_output_rules** : You can add `output` rules or override those defined by **nft_output_default_rules** for all hosts. * **nft_output_group_rules** : You can add `output` rules or override those defined by **nft_output_default_rules** and **nft_output_rules** for a group. * **nft_output_host_rules** : Hosts can also add or override all previous `output` rules. +* **nft_forward_default_rules** : Set default rules for `forward` chain. +* **nft_forward_rules** : You can add `forward` rules or override those defined by **nft_forward_default_rules** for all hosts. +* **nft_forward_group_rules** : You can add `forward` rules or override those defined by **nft_forward_default_rules** and **nft_forward_rules** for a group. +* **nft_forward_host_rules** : Hosts can also add or override all previous `forward` rules. +* **nft__forward_table_manage** : If the forward table should be managed [default : `False`]. * **nft__nat_table_manage** : If the nat table should be managed [default : `False`]. * **nft__nat_default_prerouting_rules** : Set default rules for `prerouting` chain of **nat** table. * **nft__nat_prerouting_rules** : Set rules for `prerouting` chain of **nat** table for all hosts in the Ansible inventory.