diff options
Diffstat (limited to 'manifests/blrules.pp')
-rw-r--r-- | manifests/blrules.pp | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/manifests/blrules.pp b/manifests/blrules.pp new file mode 100644 index 0000000..5565bf3 --- /dev/null +++ b/manifests/blrules.pp @@ -0,0 +1,34 @@ +# Manage blrules. For additional information type "man shorewall-blrules" +# +# Sample Usage: +# +# shorewall::interface { 'br0': +# zone => 'net', +# options => 'tcpflags,nosmurfs,routeback,bridge'; +# } +# +# class { 'shorewall::blrules': +# options => 'tcpflags,nosmurfs,routeback,bridge', +# whitelists => [ +# "net:10.0.0.1,192.168.0.1 all", +# ], +# +# drops => [ +# 'net all tcp 22', #ssh +# ], +# } + + +class shorewall::blrules ( + $whitelists, + $drops, +) { + file{'/etc/shorewall/puppet/blrules': + content => template('shorewall/blrules.erb'), + require => Package['shorewall'], + notify => Exec['shorewall_check'], + owner => root, + group => 0, + mode => '0644'; + } +} |