From 49c4dd9653312f0e2faa6c9b8583ae2f59e01082 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Fri, 10 Feb 2017 09:21:13 -0200 Subject: Adds firewall::ssh param --- manifests/init.pp | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/manifests/init.pp b/manifests/init.pp index c3ebe34..c812955 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -5,7 +5,8 @@ class firewall( $local_net = hiera('firewall::local_net', false), $device_options = hiera('firewall::device_options', 'tcpflags,blacklist,routefilter,nosmurfs,logmartians'), $vm_address = hiera('firewall::vm_address', '192.168.0.0/24'), - $vm_device = hiera('firewall::vm_device', false) + $vm_device = hiera('firewall::vm_device', false), + $ssh = hiera('firewall::ssh', 'ACCEPT'), ) { class { 'shorewall': } @@ -137,7 +138,7 @@ class firewall( # Rules # shorewall::rule { 'ssh': - action => 'SSH/ACCEPT', + action => "SSH/${ssh}", source => 'net', destination => '$FW', proto => '-', -- cgit v1.2.3