class shorewall::base {
- case $shorewall_ensure_version {
- '': { $shorewall_ensure_version = 'present' }
- }
+
package { 'shorewall':
-- ensure => $shorewall_ensure_version,
++ ensure => $shorewall::ensure_version,
}
# This file has to be managed in place, so shorewall can find it
-class shorewall {
-
- include common::moduledir
- module_dir { "shorewall": }
+class shorewall(
- $startup = '1'
++ $startup = '1',
++ $ensure_version = 'present',
++ $tor_transparent_proxy_host = '127.0.0.1',
++ $tor_transparent_proxy_port = '9040',
++ $tor_user = $::operatingsystem ? {
++ 'Debian' => 'debian-tor',
++ default => 'tor'
++ }
+) {
- case $operatingsystem {
+ case $::operatingsystem {
gentoo: { include shorewall::gentoo }
debian: {
include shorewall::debian
}
}
-- case $tor_transparent_proxy_host {
-- '': { $tor_transparent_proxy_host = '127.0.0.1' }
-- }
-- case $tor_transparent_proxy_port {
-- '': { $tor_transparent_proxy_port = '9040' }
-- }
-- if $tor_user == '' {
-- $tor_user = $dist_tor_user ? {
-- '' => 'tor',
-- default => $dist_tor_user,
-- }
- }
-
- file {"/var/lib/puppet/modules/shorewall":
- ensure => directory,
- force => true,
- owner => root, group => 0, mode => 0755;
-- }
--
# See http://www.shorewall.net/3.0/Documentation.htm#Zones
shorewall::managed_file{ zones: }
# See http://www.shorewall.net/3.0/Documentation.htm#Interfaces
shorewall::managed_file { tcrules: }
# See http://www.shorewall.net/3.0/traffic_shaping.htm
shorewall::managed_file { tcclasses: }
+ # http://www.shorewall.net/manpages/shorewall-providers.html
+ shorewall::managed_file { providers: }
+ # See http://www.shorewall.net/manpages/shorewall-tunnels.html
+ shorewall::managed_file { tunnel: }
+
}