From 261b82779d9e205e6881b3db42a29cb0d92d409a Mon Sep 17 00:00:00 2001 From: Jonathan Boyett Date: Wed, 11 May 2011 09:37:11 -0700 Subject: [PATCH] include Puppet::Util::Firewall to fix icmp values --- examples/iptables/test.pp | 10 +++++----- lib/puppet/type/firewall.rb | 2 ++ 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/examples/iptables/test.pp b/examples/iptables/test.pp index 6a8e086..4f1e390 100644 --- a/examples/iptables/test.pp +++ b/examples/iptables/test.pp @@ -3,6 +3,7 @@ firewall { '000 allow foo': jump => "ACCEPT", proto => "tcp", } + firewall { '001 allow boo': jump => "ACCEPT", iniface => "eth0", @@ -12,25 +13,24 @@ firewall { '001 allow boo': destination => "1.1.1.0/24", source => "2.2.2.0/24", } + firewall { '999 bar': dport => "1233", proto => "tcp", jump => "DROP", } + firewall { '002 foo': dport => "1233", proto => "tcp", jump => "DROP", } + firewall { "010 icmp": proto => "icmp", -# icmp => "any", + icmp => "echo-reply", jump => "ACCEPT", } -#firewall { "050 horrowshow": -# -#} - resources { 'firewall': purge => true diff --git a/lib/puppet/type/firewall.rb b/lib/puppet/type/firewall.rb index 7f36494..0bb349e 100644 --- a/lib/puppet/type/firewall.rb +++ b/lib/puppet/type/firewall.rb @@ -20,6 +20,8 @@ require 'puppet/util/firewall' Puppet::Type.newtype(:firewall) do + include Puppet::Util::Firewall + @doc = "Manipulate firewall rules" ensurable do -- 2.45.2