diff options
author | Micah <micah@leap.se> | 2016-05-24 10:19:26 -0400 |
---|---|---|
committer | Micah <micah@leap.se> | 2016-05-24 10:19:26 -0400 |
commit | b0e1e4c82db3c70ddc67639a9b983de89b415477 (patch) | |
tree | ec1cfae175cc939dc5d2b5c99150480e31eae295 /manifests/rules/torify.pp |
Squashed 'puppet/modules/shorewall/' content from commit 34fbca6
git-subtree-dir: puppet/modules/shorewall
git-subtree-split: 34fbca68d478c2edd5f13e74245cf675b5b53303
Diffstat (limited to 'manifests/rules/torify.pp')
-rw-r--r-- | manifests/rules/torify.pp | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/manifests/rules/torify.pp b/manifests/rules/torify.pp new file mode 100644 index 00000000..f6e62d81 --- /dev/null +++ b/manifests/rules/torify.pp @@ -0,0 +1,29 @@ +# shorewall::rules::torify +# +# Note: shorewall::rules::torify cannot be used several times with the +# same user listed in the $users array. This restriction applies to +# using this define multiple times without providing a $users +# parameter. +# +# Parameters: +# +# - users: every element of this array must be valid in shorewall +# rules user/group column. +# - destinations: every element of this array must be valid in +# shorewall rules original destination column. + +define shorewall::rules::torify( + $users = ['-'], + $destinations = ['-'], + $allow_rfc1918 = true +){ + + $originaldest = join($destinations,',') + + shorewall::rules::torify::user { + $users: + originaldest => $originaldest, + allow_rfc1918 => $allow_rfc1918; + } + +} |