# Firewall definitions for physical servers
class firewall(
- $local_net = hiera('firewall::local_net', false),
- $in_bandwidth = hiera('firewall::in_bandwidth', '2mbit'),
- $out_bandwidth = hiera('firewall::out_bandwidth', '2mbit'),
- $eth0_options = hiera('firewall::eth0_options', 'tcpflags,blacklist,routefilter,nosmurfs,logmartians')
+ $local_net = hiera('firewall::local_net', false),
+ $in_bandwidth = hiera('firewall::in_bandwidth', '2mbit'),
+ $out_bandwidth = hiera('firewall::out_bandwidth', '2mbit'),
+ $device_options = hiera('firewall::device_options', 'tcpflags,blacklist,routefilter,nosmurfs,logmartians')
) {
class { 'shorewall': }
shorewall::interface { 'eth0':
zone => '-',
rfc1918 => $rfc1918,
- options => $eth0_options,
+ options => $device_options,
}
#