summaryrefslogtreecommitdiff
path: root/puppet/modules/site_shorewall
diff options
context:
space:
mode:
authorelijah <elijah@riseup.net>2014-07-01 16:06:22 -0700
committerelijah <elijah@riseup.net>2014-07-01 16:06:22 -0700
commitb2f184c027c166c86c2c2e434389542e42bd9304 (patch)
tree3c7e703452da8c4caca3469f08c63f4e3041b71c /puppet/modules/site_shorewall
parent82dbbf823d6637082f63e55ed1d2f57a11e0d481 (diff)
parent7e278f92f34e3809d380be724f0c306430791b10 (diff)
Merge branch 'obfsproxy' into develop
Diffstat (limited to 'puppet/modules/site_shorewall')
-rw-r--r--puppet/modules/site_shorewall/manifests/obfsproxy.pp24
1 files changed, 24 insertions, 0 deletions
diff --git a/puppet/modules/site_shorewall/manifests/obfsproxy.pp b/puppet/modules/site_shorewall/manifests/obfsproxy.pp
new file mode 100644
index 00000000..68fb9b9f
--- /dev/null
+++ b/puppet/modules/site_shorewall/manifests/obfsproxy.pp
@@ -0,0 +1,24 @@
+class site_shorewall::obfsproxy {
+
+ include site_shorewall::defaults
+
+ $obfsproxy = hiera('obfsproxy')
+ $scramblesuit = $obfsproxy['scramblesuit']
+ $scram_port = $scramblesuit['port']
+
+ # define macro for incoming services
+ file { '/etc/shorewall/macro.leap_obfsproxy':
+ content => "PARAM - - tcp $scram_port ",
+ notify => Service['shorewall'],
+ require => Package['shorewall']
+ }
+
+ shorewall::rule {
+ 'net2fw-obfs':
+ source => 'net',
+ destination => '$FW',
+ action => 'leap_obfsproxy(ACCEPT)',
+ order => 200;
+ }
+
+}