This commit is contained in:
Henry Wang 2019-10-22 15:47:52 +08:00
parent 0aaa178f20
commit 9cacb8aba8

View File

@ -5,17 +5,17 @@
class profile::firewall::finish { class profile::firewall::finish {
# ['INPUT','OUTPUT'].each | $chain | { ['INPUT','OUTPUT'].each | $chain | {
#
# # Drop the known noise from hitting the log # Drop the known noise from hitting the log
# ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | { # ['255.255.255.255',ip_address(ip_broadcast("${::network}/${::netmask}"))].each | $dest | {
# firewall { "990 Broadcasts for $dest for ${chain}": # firewall { "990 Broadcasts for $dest for ${chain}":
# destination => $dest, # destination => $dest,
# proto => 'all', # proto => 'all',
# action => 'drop', # action => 'drop',
# chain => $chain, # chain => $chain,
# } # }
# } # }
# Log whatever hasn't been dealt with already # Log whatever hasn't been dealt with already
firewall { "998 Logging for ${chain}": firewall { "998 Logging for ${chain}":