diff options
| author | Kilian Engelhardt <kilian.engelhardt@godaddy.com> | 2018-03-16 16:49:00 +0100 |
|---|---|---|
| committer | Kilian Engelhardt <kilian.engelhardt@godaddy.com> | 2018-03-17 15:10:36 +0100 |
| commit | b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3 (patch) | |
| tree | 100fb2a5648a5b5b98f99ac529b4e64c994b3bc6 /manifests/chain.pp | |
| parent | aadcd554e91188ecaabb70b70a456bb5baa328e0 (diff) | |
| download | puppet-ferm-b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3.tar.gz puppet-ferm-b1deffa5ddf26c14bd8ef404237f79e4ed4f94d3.tar.bz2 | |
introduce parameter disable_conntrack
Default value of disable_conntrack is 'false'. Existing installations
are not affected by this change.
Diffstat (limited to 'manifests/chain.pp')
| -rw-r--r-- | manifests/chain.pp | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/manifests/chain.pp b/manifests/chain.pp index 6f2ee1d..5b21912 100644 --- a/manifests/chain.pp +++ b/manifests/chain.pp @@ -1,8 +1,10 @@ # defined resource which creates all rules for one chain # @param policy [Ferm::Policies] Set the default policy for a CHAIN +# @param disable_conntrack [Boolean] disable/enable usage of conntrack # @param chain [Ferm::Chains] name of the chain that should be managed define ferm::chain ( Ferm::Policies $policy, + Boolean $disable_conntrack, Ferm::Chains $chain = $name, ) { @@ -14,7 +16,12 @@ define ferm::chain ( concat::fragment{"${chain}-policy": target => "/etc/ferm.d/chains/${chain}.conf", - content => epp("${module_name}/ferm_chain_header.conf.epp", {'policy' => $policy }), + content => epp( + "${module_name}/ferm_chain_header.conf.epp", { + 'policy' => $policy, + 'disable_conntrack' => $disable_conntrack, + } + ), order => '01', } } |