]> review.fuel-infra Code Review - puppet-modules/puppetlabs-firewall.git/commit
Firewall and firewallchain persistence
authorDan Carley <dan.carley@gmail.com>
Tue, 26 Feb 2013 21:07:01 +0000 (21:07 +0000)
committerDan Carley <dan.carley@gmail.com>
Thu, 28 Feb 2013 22:31:24 +0000 (22:31 +0000)
commit000a586c1f51e7e351637b73ea6b98e249125056
tree9ecb40d7d7a562da904bef29b0a86899aae21044
parentd11fd4f179ae6701049179da4bae487e8f0c8d41
Firewall and firewallchain persistence

Call the necessary commands from the provider to persist rules between
reboots. Tested on the following distros:

- CentOS 5.8
- CentOS 6.3
- Ubuntu 10.04
- Ubuntu 12.04
- Debian 6

Cavaets:

- Persistence may fail on the first run if Firewall resources are actioned
  before the Package resource.
- Older iptables-persistent doesn't support the restoration of ip6tables.
- ebtables cannot be restored.
README.markdown
lib/facter/iptables_persistent_version.rb [new file with mode: 0644]
lib/puppet/provider/firewall/ip6tables.rb
lib/puppet/provider/firewall/iptables.rb
lib/puppet/provider/firewallchain/iptables_chain.rb
lib/puppet/type/firewallchain.rb
lib/puppet/util/firewall.rb
manifests/init.pp
spec/classes/firewall_linux_debian_spec.rb
spec/classes/firewall_linux_redhat_spec.rb
spec/unit/facter/iptables_persistent_version_spec.rb [new file with mode: 0644]