diff options
| author | Lebedev Vadim <abraham1901@gmail.com> | 2014-03-18 23:00:32 +0400 |
|---|---|---|
| committer | Matt Taggart <taggart@riseup.net> | 2017-02-09 15:02:57 -0800 |
| commit | 4c69a621db40f60a3f43e6587e6367dbf8cbfb1a (patch) | |
| tree | e51512e06673b896e515a9086a939b215050e309 | |
| parent | ba8d84a98b4193867f3edda7fc3f497fd7edc373 (diff) | |
* Add example
| -rw-r--r-- | manifests/blrules.pp | 27 |
1 files changed, 23 insertions, 4 deletions
diff --git a/manifests/blrules.pp b/manifests/blrules.pp index 843a28f..e45739e 100644 --- a/manifests/blrules.pp +++ b/manifests/blrules.pp @@ -1,9 +1,31 @@ +# Manage blrules. For additional information type "man shorewall-blrules" +# +# Sample Usage: +# +# shorewall::interface { 'br0': +# zone => 'net', +# rfc1918 => true, +# options => 'tcpflags,blacklist,nosmurfs,routeback,bridge'; +# } +# +# class { 'shorewall::blrules': +# options => 'tcpflags,blacklist,nosmurfs,routeback,bridge', +# whitelists => [ +# "net:10.0.0.1,192.168.0.1 all", +# ], +# +# drops => [ +# 'net all tcp 22', #ssh +# ], +# } + + class shorewall::blrules ( $whitelists, $drops, ) { file{'/etc/shorewall/puppet/blrules': - content => template("shorewall/blrules.erb"), + content => template('shorewall/blrules.erb'), require => Package['shorewall'], notify => Service['shorewall'], owner => root, @@ -11,6 +33,3 @@ class shorewall::blrules ( mode => 0644; } } - - - |