Hi
I'm trying to let puppet manage the firewall in combination with the
fail2ban tool. However puppet keeps purging the fail2ban rules. Any idea
what's wrong with my config below:
resources { "firewall": purge => true }
Class['fw::pre'] -> Class['fw::post']
class fw::post {
firewallchain { 'INPUT:filter:IPv4':
ensure => present,
policy => drop,
ignore => ['-j fail2ban-ssh']
}
firewallchain { 'FORWARD:filter:IPv4':
ensure => present,
policy => drop
}
firewallchain { 'fail2ban-ssh:filter:IPv4':
ensure => present,
purge => false,
ignore => ['--comment "[^"](?i:ignore)[^"]"']
}
...
}
class fw::pre {
firewall { '000 INPUT allow related and established':
iniface => $::external_interface,
state => ['RELATED', 'ESTABLISHED'],
action => 'accept',
proto => 'all'
}
...
}
The ignore rule looks like this:
iptables -I fail2ban-ssh -s 58.218.204.245 -m comment --comment "ignore"
-j DROP
Best regards,
Arkadi Colson
--
You received this message because you are subscribed to the Google Groups "Puppet
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/553A34E1.8030801%40smartbit.be.
For more options, visit https://groups.google.com/d/optout.
