]> gitweb.fluxo.info Git - puppet-firewall.git/commitdiff
Adding firewall::pppoe
authorSilvio Rhatto <rhatto@riseup.net>
Fri, 26 Sep 2014 20:52:17 +0000 (17:52 -0300)
committerSilvio Rhatto <rhatto@riseup.net>
Fri, 26 Sep 2014 20:52:17 +0000 (17:52 -0300)
manifests/pppoe.pp [new file with mode: 0644]

diff --git a/manifests/pppoe.pp b/manifests/pppoe.pp
new file mode 100644 (file)
index 0000000..a771d48
--- /dev/null
@@ -0,0 +1,26 @@
+class firewall::pppoe(
+  $packages  = false,
+  $local_dev = false,
+) {
+  # Manage pppoe packages, requires nodo module
+  if $packages == true {
+    include nodo::utils::network::pppoe
+  }
+
+  # Define device in the local zone
+  if $local_dev == true{
+    shorewall::interface { "eth0":
+     zone    => 'loc',
+     rfc1918 => false,
+     options => 'tcpflags,blacklist,routefilter,nosmurfs,logmartians',
+    }
+  }
+
+  # See http://shorewall.net/two-interface.htm
+  augeas { 'clampmss':
+    changes => 'set /files/etc/shorewall/shorewall.conf/CLAMPMSS Yes',
+    lens    => 'Shellvars.lns',
+    incl    => '/etc/shorewall/shorewall.conf',
+    notify  => Service[shorewall];
+  }
+}