diff options
author | varac <varacanero@zeromail.org> | 2013-02-06 18:11:21 +0100 |
---|---|---|
committer | varac <varacanero@zeromail.org> | 2013-02-06 23:23:21 +0100 |
commit | ab25692d3b8aaf3e71ec3546d1ea9d85f26f7b63 (patch) | |
tree | 327a23c7fe726f57517fec594e08b0d5b811656d /puppet/modules/site_shorewall/manifests/ip_forward.pp | |
parent | 97c5451b0f8b63b4884a9560c0a796f931d059e3 (diff) |
Restructuring site_shorewall
site_shorewall::defaults can be used on every host, it configures
a basic firewall, which blocks everything from outside except
ping + ssh, and allows outgoing traffic for http, git, dns.
Diffstat (limited to 'puppet/modules/site_shorewall/manifests/ip_forward.pp')
-rw-r--r-- | puppet/modules/site_shorewall/manifests/ip_forward.pp | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/puppet/modules/site_shorewall/manifests/ip_forward.pp b/puppet/modules/site_shorewall/manifests/ip_forward.pp new file mode 100644 index 00000000..d09d4fd1 --- /dev/null +++ b/puppet/modules/site_shorewall/manifests/ip_forward.pp @@ -0,0 +1,10 @@ +class site_shorewall::ip_forward { + include augeas + augeas { 'enable_ip_forwarding': + changes => 'set /files/etc/shorewall/shorewall.conf/IP_FORWARDING Yes', + lens => 'Shellvars.lns', + incl => '/etc/shorewall/shorewall.conf', + notify => Service[shorewall], + require => Class[augeas]; + } +} |