manifests/pppoe.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

class firewall::pppoe(
  $packages  = false,
  $local_dev = false,
) {
  # Manage pppoe packages, requires nodo module
  if $packages == true {
    include nodo::utils::network::pppoe
  }

  # Define device in the local zone
  if $local_dev == true{
    shorewall::interface { "eth0":
     zone    => 'loc',
     rfc1918 => false,
     options => 'tcpflags,blacklist,routefilter,nosmurfs,logmartians',
    }
  }

  # See http://shorewall.net/two-interface.htm
  augeas { 'clampmss':
    changes => 'set /files/etc/shorewall/shorewall.conf/CLAMPMSS Yes',
    lens    => 'Shellvars.lns',
    incl    => '/etc/shorewall/shorewall.conf',
    notify  => Service[shorewall];
  }
}