> And from a quick look at lib/puppet/type/firewalls.rb I see:
>
>
> newproperty(:proto) do desc <<-EOS The specific protocol to match for
> this rule. By default this is *tcp*. EOS newvalues(*[:tcp, :udp, :icmp,
> :"ipv6-icmp", :esp, :ah, :vrrp, :igmp, :ipencap, :ospf, :gre, :cbt,
> :all].collect do |proto| [proto, "! #{proto}".to_sym] end.flatten)
> defaultto "tcp"
>
>
>
>
> Now, I can edit the file to change the value to defaultto "all", and the
> rules look something like
>
> firewall { '1990 related established': action => 'accept', state =>
> ['RELATED', 'ESTABLISHED'], chain => 'OUTPUT', provider => 'iptables', }
>
>
definitly the wrong place to change a default is to change yourself lib/
puppet/type/firewalls.rb
Use the following in manifests/site.pp (outside a node definition, "top-
scope"):
Firewall {
proto => 'all',
}
https://docs.puppetlabs.com/puppet/latest/reference/lang_defaults.html
https://docs.puppetlabs.com/guides/style_guide.html#resource-defaults
regards
- Thomas
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/m6ok1a%24kp%241%40ger.gmane.org.
For more options, visit https://groups.google.com/d/optout.
