aboutsummaryrefslogtreecommitdiff
path: root/manifests/rule.pp
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2018-12-19 13:59:33 +0100
committerGitHub <noreply@github.com>2018-12-19 13:59:33 +0100
commit85e400ba3a89c47546a8d11a74424bba92685b7c (patch)
treed76b99423d5d5b05ed5ce3e38c80ed3be1ac3411 /manifests/rule.pp
parent0a25439016f4e99d4f73457c9f19436329608ca6 (diff)
parentf3136278ebd816c58e305e937254e5ca0e2c0a91 (diff)
downloadpuppet-ferm-85e400ba3a89c47546a8d11a74424bba92685b7c.tar.gz
puppet-ferm-85e400ba3a89c47546a8d11a74424bba92685b7c.tar.bz2
Merge pull request #32 from bastelfreak/log2
Implement logging to kernel log
Diffstat (limited to 'manifests/rule.pp')
-rw-r--r--manifests/rule.pp11
1 files changed, 11 insertions, 0 deletions
diff --git a/manifests/rule.pp b/manifests/rule.pp
index 7b94210..6f448f9 100644
--- a/manifests/rule.pp
+++ b/manifests/rule.pp
@@ -1,3 +1,14 @@
+# defined resource which creates a single rule in a specific chain
+# @param chain Configure the chain where we want to add the rule
+# @param policy Configure what we want to do with the packet (drop, accept, log...)
+# @param proto Which protocol do we want to match, typically UDP or TCP
+# @param comment A comment that will be added to the ferm config and to ip{,6}tables
+# @param dport The destination port, can be a range as string or a single port number as integer
+# @param sport The source port, can be a range as string or a single port number as integer
+# @param saddr The source address we want to match
+# @param daddr The destination address we want to match
+# @param proto_options Optional parameters that will be passed to the protocol (for example to match specific ICMP types)
+# @param ensure Set the rule to present or absent
define ferm::rule (
Ferm::Chains $chain,
Ferm::Policies $policy,