diff --git a/Puppetfile b/Puppetfile index 197c3de..e5a0288 100644 --- a/Puppetfile +++ b/Puppetfile @@ -30,3 +30,4 @@ mod 'tkishel-unlock_puppet', :git => 'ssh://git@github.com/tkishel/unlock_puppet.git', :branch => 'master' mod 'puppetlabs-firewall', '2.0.0' +mod 'puppetlabs-satellite_pe_tools', '3.0.0' diff --git a/site-modules/profile/.DS_Store b/site-modules/profile/.DS_Store index f0d1119..2c8d294 100644 Binary files a/site-modules/profile/.DS_Store and b/site-modules/profile/.DS_Store differ diff --git a/site-modules/profile/manifests/firewall/finish.pp b/site-modules/profile/manifests/firewall/finish.pp index 973e02c..658911a 100644 --- a/site-modules/profile/manifests/firewall/finish.pp +++ b/site-modules/profile/manifests/firewall/finish.pp @@ -7,15 +7,15 @@ class profile::firewall::finish { ['INPUT','OUTPUT'].each | $chain | { - # Drop the known noise from hitting the log - # ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { - # firewall { "990 Broadcasts for $dest for ${chain}": - # destination => $dest, - # proto => 'all', - # action => 'drop', - # chain => $chain, - # } - # } + #Drop the known noise from hitting the log + ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { + firewall { "990 Broadcasts for $dest for ${chain}": + destination => $dest, + proto => 'all', + action => 'drop', + chain => $chain, + } + } # Log whatever hasn't been dealt with already firewall { "998 Logging for ${chain}":