This commit is contained in:
Henry Wang 2019-10-22 15:44:56 +08:00
parent 70384a4cf2
commit 0aaa178f20

View File

@ -5,17 +5,17 @@
class profile::firewall::finish { class profile::firewall::finish {
['INPUT','OUTPUT'].each | $chain | { # ['INPUT','OUTPUT'].each | $chain | {
#
# Drop the known noise from hitting the log # # Drop the known noise from hitting the log
['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { # ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
firewall { "990 Broadcasts for $dest for ${chain}": # firewall { "990 Broadcasts for $dest for ${chain}":
destination => $dest, # destination => $dest,
proto => 'all', # proto => 'all',
action => 'drop', # action => 'drop',
chain => $chain, # chain => $chain,
} # }
} # }
# Log whatever hasn't been dealt with already # Log whatever hasn't been dealt with already
firewall { "998 Logging for ${chain}": firewall { "998 Logging for ${chain}":