This commit is contained in:
Henry Wang 2019-10-25 13:39:33 +08:00
parent 9cacb8aba8
commit 22253d5888
3 changed files with 10 additions and 9 deletions

View File

@ -30,3 +30,4 @@ mod 'tkishel-unlock_puppet',
:git => 'ssh://git@github.com/tkishel/unlock_puppet.git', :git => 'ssh://git@github.com/tkishel/unlock_puppet.git',
:branch => 'master' :branch => 'master'
mod 'puppetlabs-firewall', '2.0.0' mod 'puppetlabs-firewall', '2.0.0'
mod 'puppetlabs-satellite_pe_tools', '3.0.0'

Binary file not shown.

View File

@ -8,14 +8,14 @@ class profile::firewall::finish {
['INPUT','OUTPUT'].each | $chain | { ['INPUT','OUTPUT'].each | $chain | {
#Drop the known noise from hitting the log #Drop the known noise from hitting the log
# ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
# firewall { "990 Broadcasts for $dest for ${chain}": firewall { "990 Broadcasts for $dest for ${chain}":
# destination => $dest, destination => $dest,
# proto => 'all', proto => 'all',
# action => 'drop', action => 'drop',
# chain => $chain, chain => $chain,
# } }
# } }
# Log whatever hasn't been dealt with already # Log whatever hasn't been dealt with already
firewall { "998 Logging for ${chain}": firewall { "998 Logging for ${chain}":