@@ -4,8 +4,8 @@ Description
4
4
Provides a set of primitives for managing firewalls and associated rules.
5
5
6
6
PLEASE NOTE - The resource/providers in this cookbook are under heavy development.
7
- An attempt is being made to keep the resource simple/stupid by starting with less
8
- sophisticated firewall implementations first and refactor/vet the resource definition
7
+ An attempt is being made to keep the resource simple/stupid by starting with less
8
+ sophisticated firewall implementations first and refactor/vet the resource definition
9
9
with each successive provider.
10
10
11
11
Requirements
@@ -43,7 +43,7 @@ Resources/Providers
43
43
- platform default: Ubuntu
44
44
45
45
### Examples
46
-
46
+
47
47
# enable platform default firewall
48
48
firewall "ufw" do
49
49
action :enable
@@ -70,7 +70,7 @@ Resources/Providers
70
70
- protocol: valid values are: : udp , : tcp . default is all protocols
71
71
- port: incoming port number (ie. 22 to allow inbound SSH)
72
72
- source: ip address or subnet to filter on incoming traffic. default is ` 0.0.0.0/0 ` (ie Anywhere)
73
- - destination: ip address or subnet to filter on outgoing traffic.
73
+ - destination: ip address or subnet to filter on outgoing traffic.
74
74
- dest_port: outgoing port number.
75
75
- position: position to insert rule at. if not provided rule is inserted at the end of the rule list.
76
76
- direction: direction of the rule. valid values are: : in , : out , default is : in
@@ -90,15 +90,15 @@ Resources/Providers
90
90
action :allow
91
91
notifies :enable, "firewall[ufw]"
92
92
end
93
-
93
+
94
94
# open standard http port to tcp traffic only; insert as first rule
95
95
firewall_rule "http" do
96
96
port 80
97
- protocol ' tcp'
97
+ protocol : tcp
98
98
position 1
99
99
action :allow
100
100
end
101
-
101
+
102
102
# restrict port 13579 to 10.0.111.0/24 on eth0
103
103
firewall_rule "myapplication" do
104
104
port 13579
@@ -156,7 +156,7 @@ Changes/Roadmap
156
156
157
157
## 0.5.2
158
158
159
- * add missing 'requires' statements. fixes 'NameError: uninitialized constant' error.
159
+ * add missing 'requires' statements. fixes 'NameError: uninitialized constant' error.
160
160
thanks to Ernad Husremović for the fix.
161
161
162
162
## 0.5.0
0 commit comments