diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2017-02-10 09:21:13 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2017-02-10 09:21:13 -0200 |
| commit | 49c4dd9653312f0e2faa6c9b8583ae2f59e01082 (patch) | |
| tree | 7189a9d1781d7ab29e5c532609c9849d567cd4f4 | |
| parent | 1dd66761a9c71baf9a5164b23018efe7f4c94bf4 (diff) | |
| download | puppet-firewall-49c4dd9653312f0e2faa6c9b8583ae2f59e01082.tar.gz puppet-firewall-49c4dd9653312f0e2faa6c9b8583ae2f59e01082.tar.bz2 | |
Adds firewall::ssh param
| -rw-r--r-- | manifests/init.pp | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/manifests/init.pp b/manifests/init.pp index c3ebe34..c812955 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -5,7 +5,8 @@ class firewall( $local_net = hiera('firewall::local_net', false), $device_options = hiera('firewall::device_options', 'tcpflags,blacklist,routefilter,nosmurfs,logmartians'), $vm_address = hiera('firewall::vm_address', '192.168.0.0/24'), - $vm_device = hiera('firewall::vm_device', false) + $vm_device = hiera('firewall::vm_device', false), + $ssh = hiera('firewall::ssh', 'ACCEPT'), ) { class { 'shorewall': } @@ -137,7 +138,7 @@ class firewall( # Rules # shorewall::rule { 'ssh': - action => 'SSH/ACCEPT', + action => "SSH/${ssh}", source => 'net', destination => '$FW', proto => '-', |