aboutsummaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorThore Bödecker <thore.boedecker@godaddy.com>2019-07-10 16:37:50 +0200
committerTim Meusel <tim@bastelfreak.de>2019-09-02 11:19:00 +0200
commit859f8ba5cb553d66c9dcdbc232d17a0b641624df (patch)
treedf30502ab574dd029636662f8bf4b06bbe182b07 /templates
parentba10de286c634715931103031ad3bf20ce56ca14 (diff)
downloadpuppet-ferm-859f8ba5cb553d66c9dcdbc232d17a0b641624df.tar.gz
puppet-ferm-859f8ba5cb553d66c9dcdbc232d17a0b641624df.tar.bz2
allow preserving of chains in tables
Diffstat (limited to 'templates')
-rw-r--r--templates/ferm.conf.epp9
1 files changed, 9 insertions, 0 deletions
diff --git a/templates/ferm.conf.epp b/templates/ferm.conf.epp
index b3aa0ce..0245a70 100644
--- a/templates/ferm.conf.epp
+++ b/templates/ferm.conf.epp
@@ -1,8 +1,17 @@
<%- | String[1] $ip,
Stdlib::Absolutepath $configdirectory,
+Hash[String[1], Array[String[1]]] $preserve_chains_in_tables,
| -%>
# End custom section
+<%- $preserve_chains_in_tables.each |$table, $chains| { -%>
+domain (<%= $ip %>) table <%= $table %> {
+ <%- $chains.each |$chain| { -%>
+ chain <%= $chain %> @preserve;
+ <%- } -%>
+}
+<%- } -%>
+
domain (<%= $ip %>) table filter {
chain INPUT {
interface lo ACCEPT;