Parcourir la source

Add firewall state

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm il y a 4 ans
Parent
commit
847fa1fc42
1 fichiers modifiés avec 33 ajouts et 0 suppressions
  1. 33 0
      firewall/init.sls

+ 33 - 0
firewall/init.sls

@@ -0,0 +1,33 @@
+#
+# Netfiler stuff
+#
+
+/etc/modules-load.d/netfilter:
+  file.managed:
+    - source: salt://firewall/modules
+
+
+iptables-persistent:
+  pkg.installed
+
+iptables-restore:
+  cmd.wait:
+    - name: /sbin/iptables-restore < /etc/iptables/rules.v4
+    - watch:
+      - file: /etc/iptables/rules.v4
+
+ip6tables-restore:
+  cmd.wait:
+    - name: /sbin/ip6tables-restore < /etc/iptables/rules.v6
+    - watch:
+      - file: /etc/iptables/rules.v6
+
+/etc/iptables/rules.v4:
+  file.managed:
+    - source: salt://firewall/rules.v4.tmpl
+    - template: jinja
+
+/etc/iptables/rules.v6:
+  file.managed:
+    - source: salt://firewall/rules.v6.tmpl
+    - template: jinja