aboutsummaryrefslogtreecommitdiff
path: root/templates/ferm-chain-ipset.epp
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2019-10-01 16:35:56 +0200
committerGitHub <noreply@github.com>2019-10-01 16:35:56 +0200
commit1432f4316871f9c367d0cac8e3758d239d2f79ea (patch)
tree8cfc5af5a35a1557af027d68eccbd9def263dbde /templates/ferm-chain-ipset.epp
parent5d00a506f896fccb2485ebf3ea316f0156b80f8b (diff)
parentd4b8909eab6194da389b121e46137da7618eb45c (diff)
downloadpuppet-ferm-1432f4316871f9c367d0cac8e3758d239d2f79ea.tar.gz
puppet-ferm-1432f4316871f9c367d0cac8e3758d239d2f79ea.tar.bz2
Merge pull request #80 from bastelfreak/ipsets
implement ipset support
Diffstat (limited to 'templates/ferm-chain-ipset.epp')
-rw-r--r--templates/ferm-chain-ipset.epp13
1 files changed, 13 insertions, 0 deletions
diff --git a/templates/ferm-chain-ipset.epp b/templates/ferm-chain-ipset.epp
new file mode 100644
index 0000000..79aeb5c
--- /dev/null
+++ b/templates/ferm-chain-ipset.epp
@@ -0,0 +1,13 @@
+<%- | String[1] $ip,
+Ferm::Tables $table,
+String[1] $chain,
+Hash[String[1], Ferm::Actions] $sets,
+| -%>
+
+domain (<%= $ip %>) table <%= $table %> {
+ chain <%= $chain %> {
+ <%- $sets.each |$ipset, $action| { -%>
+ mod set set <%= $ipset %> src <%= $action %>;
+ <%- } -%>
+ }
+}