leap_platform.git/puppet/modules/site_shorewall/manifests/defaults.pp, branch 0.3.0rc1

make sure that the shorewall package is installed before trying to change its configuration file (#3701)

2013-09-04T14:45:20+00:00

Change-Id: Ib2dad30d53e5bf7539762eb3683430b10eb875ed

install a preliminary firewall that blocks everything, except ssh for the cases when shorewall doesn't properly come up, ensuring that it fails safe (#3339)

2013-08-22T13:43:20+00:00

Change-Id: Id4f0bf6cf25f420aa2ad67635b37ae95f54e3d38

setup a site_config::params class that can be used to set some common variables that are used in different places

2013-04-30T21:17:54+00:00

to start with we setup the $interface variable, based on logic as defined in #2213
change the various places that were looking up this value to use site_config::params::interface instead

allow all outgoing traffic

2013-02-06T22:33:51+00:00

Restructuring site_shorewall

2013-02-06T22:23:21+00:00

site_shorewall::defaults can be used on every host, it configures
a basic firewall, which blocks everything from outside except
ping + ssh, and allows outgoing traffic for http, git, dns.

require the augeas class before doing any augeas operations (#1215)

2013-01-17T22:18:24+00:00

no need for sections in shorewall rules

2012-12-14T12:14:49+00:00

from the shorewall-rules manpage:

"If no Section Headers appear in the file then all rules are assumed to be in the NEW section."

set ip_forwarding using augeas

2012-12-04T20:50:08+00:00

move interface definition for eth0 to eip.pp, use variable

2012-10-29T19:48:02+00:00

cleaned defaults.pp

2012-10-08T21:52:50+00:00