diff options
author | kwadronaut <kwadronaut@leap.se> | 2018-11-09 10:03:32 +0100 |
---|---|---|
committer | kwadronaut <kwadronaut@leap.se> | 2018-11-09 10:03:32 +0100 |
commit | 74ebf6e34723573a23bf0e758978fb3969e362f8 (patch) | |
tree | 6abed2eb699e572c418d25d9969b2f4b083a83c0 /manifests/conntrack/helper.pp | |
parent | 06e89ed3486916ae12186e46b8ec59c8c7c79142 (diff) | |
parent | cabbf434c1778cb4e8fe2f7f726a012f707cd2a5 (diff) |
Diffstat (limited to 'manifests/conntrack/helper.pp')
-rw-r--r-- | manifests/conntrack/helper.pp | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/manifests/conntrack/helper.pp b/manifests/conntrack/helper.pp new file mode 100644 index 0000000..ea7fb2e --- /dev/null +++ b/manifests/conntrack/helper.pp @@ -0,0 +1,32 @@ +# Class for managing conntrack file: Helpers +# +# See http://shorewall.net/manpages/shorewall-conntrack.html for more info. +# The $name defines the helper, so this needs to match one of the helpers +# in the documentation. +define shorewall::conntrack::helper( + $ensure = present, + $options = '', + $source = '-', + $destination = '-', + $proto, + $destinationport, + $sourceport = '', + $user = '', + $switch = '', + $chain = 'PO', + $order +) { + + $_helper = sprintf("__%s_HELPER", upcase($name)) + $_chain = ":${chain}" + $_options = '' + + if ($options != '') { + $_options = "(${options})" + } + + shorewall::entry{"conntrack-${order}-${name}": + ensure => $ensure, + line => "?if ${_helper}\nCT:helper:${name}${_options}${_chain} ${source} ${destination} ${proto} ${destinationport} ${sourceport} ${$user} ${switch}\n?endif" + } +} |