puppet/modules/site_shorewall/manifests/soledad.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

# Setup soledad server
class site_shorewall::soledad {

  $soledad      = hiera('soledad')
  $soledad_port = $soledad['port']

  include site_shorewall::defaults

  # define macro for incoming services
  file { '/etc/shorewall/macro.leap_soledad':
    content => "PARAM   -       -       tcp    ${soledad_port}",
    notify  => Exec['shorewall_check'],
    require => Package['shorewall']
  }

  shorewall::rule {
    'net2fw-soledad':
      source      => 'net',
      destination => '$FW',
      action      => 'leap_soledad(ACCEPT)',
      order       => 200;
  }
}