Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- class iptables ($fileversion = 'default'){
- file { '/etc/network/if-pre-up.d/firewall':
- ensure => present,
- owner => 'root',
- group => 'root',
- mode => 755,
- content => "#!/bin/sh
- /sbin/iptables-restore < /etc/iptables.firewall.rules",
- }
- $source = 'puppet:///iptables/default'
- if $fileversion == 'load-balancer' {
- $source = 'puppet:///iptables/loadbalancer'
- }
- elseif $fileversion == 'vpn' {
- $source = 'puppet:///iptables/vpn'
- }
- file { '/etc/iptables.firewall.rules':
- ensure => present,
- owner => 'root',
- group => 'root',
- mode => 755,
- source => $source,
- }
- exec { '/sbin/iptables-restore < /etc/iptables.firewall.rules':
- subscribe => File['/etc/iptables.firewall.rules'],
- refreshonly => true,
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment