ffquintella-firewallmanager

This module uses other modules to create firewall rules. It's main purpuse is to make it easier to create rules in hiera files


License
Apache-2.0
Install
puppet module install ffquintella-firewallmanager --version 1.1.4

Documentation

firewallmanager

Table of Contents

  1. Description
  2. Setup - The basics of getting started with firewallmanager
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility, etc.
  5. Development - Guide for contributing to the module

Description

This module allows you to handle firewall rules using hiera declarations

Setup

Beginning with firewallmanager

Basically all you need to start using it is to include the firewall manager class


include 'firewallmanager'

Usage

Basically you will define the open ports you need on hiera files like this

Usual example

frwRule::ports:
  '10058':
    'tcp': 'allow'
  '54663':
    'tcp': 'allow'
    'udp': 'allow'
  '54664':
    'tcp': 'allow'
  '54953':
    'tcp': 'allow'

A more advanced rule set is also supported

frwRule::rules:
            -
              port: '8080'
              protocol: 'tcp'
              action: 'accept'
              source: '10.252.7.0'
              sourcemask: '24'
              destination: '0.0.0.0'
              destinationmask: '0'
            -
              port: '80'
              protocol: 'tcp'
              action: 'accept'
              source: '10.252.7.0'
              sourcemask: '24'
              destination: '0.0.0.0'
              destinationmask: '0'

Limitations

This is only tested on RedHat environments

Development

Please try to keep your code tested and well documented.