aboutsummaryrefslogtreecommitdiff
path: root/templates/ferm_chain_header.conf.epp
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2017-09-18 15:23:36 +0200
committerTim Meusel <tim@bastelfreak.de>2018-03-15 17:06:08 +0100
commit2d355a4c1baadc761d6b12645d0274da8866f722 (patch)
treee6d1a78f9719397ed9ce9144bf4706a3ccd46c48 /templates/ferm_chain_header.conf.epp
downloadpuppet-ferm-2d355a4c1baadc761d6b12645d0274da8866f722.tar.gz
puppet-ferm-2d355a4c1baadc761d6b12645d0274da8866f722.tar.bz2
initial commit
Diffstat (limited to 'templates/ferm_chain_header.conf.epp')
-rw-r--r--templates/ferm_chain_header.conf.epp8
1 files changed, 8 insertions, 0 deletions
diff --git a/templates/ferm_chain_header.conf.epp b/templates/ferm_chain_header.conf.epp
new file mode 100644
index 0000000..b8c444c
--- /dev/null
+++ b/templates/ferm_chain_header.conf.epp
@@ -0,0 +1,8 @@
+<%- | Ferm::Policies $policy,
+| -%>
+# Default policy for this chain
+policy <%= $policy %>;
+
+# connection tracking
+mod state state INVALID DROP;
+mod state state (ESTABLISHED RELATED) ACCEPT;