From 22253d5888febbb0b8f2aa424a848ea29949767b Mon Sep 17 00:00:00 2001 From: Henry Wang Date: Fri, 25 Oct 2019 13:39:33 +0800 Subject: [PATCH] tst --- Puppetfile | 1 + site-modules/profile/.DS_Store | Bin 6148 -> 6148 bytes .../profile/manifests/firewall/finish.pp | 18 +++++++++--------- 3 files changed, 10 insertions(+), 9 deletions(-) diff --git a/Puppetfile b/Puppetfile index 197c3de..e5a0288 100644 --- a/Puppetfile +++ b/Puppetfile @@ -30,3 +30,4 @@ mod 'tkishel-unlock_puppet', :git => 'ssh://git@github.com/tkishel/unlock_puppet.git', :branch => 'master' mod 'puppetlabs-firewall', '2.0.0' +mod 'puppetlabs-satellite_pe_tools', '3.0.0' diff --git a/site-modules/profile/.DS_Store b/site-modules/profile/.DS_Store index f0d1119fb8e83e93fa37263c9c9e1ba2457c4892..2c8d2940c2b1702b7d2704c63ca8b60419b72418 100644 GIT binary patch delta 289 zcmZoMXfc=|#>B)qu~2NHo+2aj!~pA!9~u~ejD2Dg7a7$jl@}Kz<>V(ZFfg1zR;SSyf$ATQ?KvS|DI#gwPE9P#Q+f+PLo? j%Vu^Ceh#3|H$ME%Jegm_PynR50f>P#SmWjZkuA&svkFgt delta 70 zcmZoMXfc=|#>CJ*u~2NHo+2aD!~pBb1|lqz9hrnDD=`^uwr4)UvN?e{n`tvU2R{c; a;pRZ*@640=MGP4kCfo2xZ;laJ!3+SXBNDFw diff --git a/site-modules/profile/manifests/firewall/finish.pp b/site-modules/profile/manifests/firewall/finish.pp index 973e02c..658911a 100644 --- a/site-modules/profile/manifests/firewall/finish.pp +++ b/site-modules/profile/manifests/firewall/finish.pp @@ -7,15 +7,15 @@ class profile::firewall::finish { ['INPUT','OUTPUT'].each | $chain | { - # Drop the known noise from hitting the log - # ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { - # firewall { "990 Broadcasts for $dest for ${chain}": - # destination => $dest, - # proto => 'all', - # action => 'drop', - # chain => $chain, - # } - # } + #Drop the known noise from hitting the log + ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { + firewall { "990 Broadcasts for $dest for ${chain}": + destination => $dest, + proto => 'all', + action => 'drop', + chain => $chain, + } + } # Log whatever hasn't been dealt with already firewall { "998 Logging for ${chain}":