firewallmanager

pdk
This module is a wrapper to make it more confortable to define firewall rules on hiera or block definitions

Felipe Quintella

ffquintella

4,181 downloads

3,163 latest version

5.0 quality score

Version information

  • 1.1.4 (latest)
  • 1.1.3
released Mar 22nd 2019
This version is compatible with:
  • Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x, 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 4.7.0 < 7.0.0
  • CentOS
    ,
    OracleLinux
    ,
    RedHat

Start using this module

Documentation

ffquintella/firewallmanager — version 1.1.4 Mar 22nd 2019

firewallmanager

Table of Contents

  1. Description
  2. Setup - The basics of getting started with firewallmanager
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility, etc.
  5. Development - Guide for contributing to the module

Description

This module allows you to handle firewall rules using hiera declarations

Setup

Beginning with firewallmanager

Basically all you need to start using it is to include the firewall manager class


include 'firewallmanager'

Usage

Basically you will define the open ports you need on hiera files like this

Usual example

frwRule::ports:
  '10058':
    'tcp': 'allow'
  '54663':
    'tcp': 'allow'
    'udp': 'allow'
  '54664':
    'tcp': 'allow'
  '54953':
    'tcp': 'allow'

A more advanced rule set is also supported

frwRule::rules:
            -
              port: '8080'
              protocol: 'tcp'
              action: 'accept'
              source: '10.252.7.0'
              sourcemask: '24'
              destination: '0.0.0.0'
              destinationmask: '0'
            -
              port: '80'
              protocol: 'tcp'
              action: 'accept'
              source: '10.252.7.0'
              sourcemask: '24'
              destination: '0.0.0.0'
              destinationmask: '0'

Limitations

This is only tested on RedHat environments

Development

Please try to keep your code tested and well documented.