puppet/modules/site_shorewall/manifests/defaults.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

class site_shorewall::defaults {
  include shorewall

  # If you want logging:
  shorewall::params {
    'LOG': value => 'debug';
  }

  shorewall::zone {'net': type => 'ipv4'; }

  shorewall::rule_section { 'NEW': order => 10; }

  shorewall::interface {'eth0':
    zone      => 'net',
    options   => 'tcpflags,blacklist,nosmurfs';
  }
}