devsnack/control-repo
1
0
Fork 0
Code Releases Activity

tst

Browse Source
This commit is contained in:
Henry Wang 2019-10-25 13:39:33 +08:00
parent 9cacb8aba8
commit 22253d5888
3 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Puppetfile
View File

@ -30,3 +30,4 @@ mod 'tkishel-unlock_puppet',
:git => 'ssh://git@github.com/tkishel/unlock_puppet.git',
:branch => 'master'
mod 'puppetlabs-firewall', '2.0.0'
mod 'puppetlabs-satellite_pe_tools', '3.0.0'

BIN
site-modules/profile/.DS_Store vendored
View File

Binary file not shown.

18
site-modules/profile/manifests/firewall/finish.pp
View File

@ -7,15 +7,15 @@ class profile::firewall::finish {
['INPUT','OUTPUT'].each | $chain | {
# Drop the known noise from hitting the log
# ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
# firewall { "990 Broadcasts for $dest for ${chain}":
# destination => $dest,
# proto => 'all',
# action => 'drop',
# chain => $chain,
# }
# }
#Drop the known noise from hitting the log
['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
firewall { "990 Broadcasts for $dest for ${chain}":
destination => $dest,
proto => 'all',
action => 'drop',
chain => $chain,
}
}
# Log whatever hasn't been dealt with already
firewall { "998 Logging for ${chain}":