devsnack/control-repo
1
0
Fork 0
Code Releases Activity

tsts

Browse Source
This commit is contained in:
Henry Wang 2019-10-22 15:44:56 +08:00
parent 70384a4cf2
commit 0aaa178f20
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
site-modules/profile/manifests/firewall/finish.pp
View File

@ -5,17 +5,17 @@
class profile::firewall::finish {
['INPUT','OUTPUT'].each | $chain | {
# Drop the known noise from hitting the log
['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
firewall { "990 Broadcasts for $dest for ${chain}":
destination => $dest,
proto => 'all',
action => 'drop',
chain => $chain,
}
}
# ['INPUT','OUTPUT'].each | $chain | {
#
# # Drop the known noise from hitting the log
# ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
# firewall { "990 Broadcasts for $dest for ${chain}":
# destination => $dest,
# proto => 'all',
# action => 'drop',
# chain => $chain,
# }
# }
# Log whatever hasn't been dealt with already
firewall { "998 Logging for ${chain}":