diff options
| author | Tim Meusel <tim@bastelfreak.de> | 2018-07-13 18:58:51 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-07-13 18:58:51 +0200 |
| commit | d98f270b488bc2bf7ebbb343f984ad1209669c2c (patch) | |
| tree | f4f241fbd50e9662795283ebf72f1623f9b7e3b7 /manifests/rule.pp | |
| parent | 0d5ef0c562710395b17fe10b6a1096ed43f58bed (diff) | |
| parent | 65ebfd9de601225b1fab19580cef85d80fce6988 (diff) | |
| download | puppet-ferm-d98f270b488bc2bf7ebbb343f984ad1209669c2c.tar.gz puppet-ferm-d98f270b488bc2bf7ebbb343f984ad1209669c2c.tar.bz2 | |
Merge pull request #20 from kBite/add-protocol-suffix-to-enable-usage-of-icmp-types
Add `proto_options` to enable usage of icmp types
Diffstat (limited to 'manifests/rule.pp')
| -rw-r--r-- | manifests/rule.pp | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/manifests/rule.pp b/manifests/rule.pp index 679f09d..7b94210 100644 --- a/manifests/rule.pp +++ b/manifests/rule.pp @@ -7,6 +7,7 @@ define ferm::rule ( Optional[Variant[Integer,String]] $sport = undef, Optional[String] $saddr = undef, Optional[String] $daddr = undef, + Optional[String[1]] $proto_options = undef, Enum['absent','present'] $ensure = 'present', ){ $proto_real = "proto ${proto}" @@ -24,12 +25,16 @@ define ferm::rule ( default => "saddr @ipfilter(${saddr})", } $daddr_real = $daddr ? { - undef => '', + undef => '', default => "daddr @ipfilter(${daddr})" } + $proto_options_real = $proto_options ? { + undef => '', + default => $proto_options + } $comment_real = "mod comment comment '${comment}'" - $rule = squeeze("${comment_real} ${proto_real} ${dport_real} ${sport_real} ${daddr_real} ${saddr_real} ${policy};", ' ') + $rule = squeeze("${comment_real} ${proto_real} ${proto_options_real} ${dport_real} ${sport_real} ${daddr_real} ${saddr_real} ${policy};", ' ') if $ensure == 'present' { concat::fragment{"${chain}-${name}": target => "/etc/ferm.d/chains/${chain}.conf", |