Browse Source

Merge pull request #13 from ppieprzycki/master

New parameters
master
Filip Pytloun 7 years ago
parent
commit
2a8f4002c7
No account linked to committer's email address
2 changed files with 39 additions and 0 deletions
  1. +24
    -0
      README.rst
  2. +15
    -0
      iptables/_rule.sls

+ 24
- 0
README.rst View File

jump: ACCEPT jump: ACCEPT
comment: Blah comment: Blah


Support logging with custom prefix and log level

.. code-block:: yaml

parameters:
iptables:
service:
chain:
POSTROUTING:
rules:
- table: nat
protocol: tcp
match: multiport
destination_ports:
- 21
- 80
- 443
- 2220
source_network: '10.20.30.0/24'
log_level: 7
log_prefix: 'iptables-logging: '
jump: LOG


IPv6 is supported as well IPv6 is supported as well


.. code-block:: yaml .. code-block:: yaml

+ 15
- 0
iptables/_rule.sls View File

{%- if rule.destination_port is defined %} {%- if rule.destination_port is defined %}
- dport: {{ rule.destination_port }} - dport: {{ rule.destination_port }}
{%- endif %} {%- endif %}
{%- if rule.destination_ports is defined %}
- dports:
{%- for port in rule.destination_ports %}
- {{ port }}
{% endfor %}
{%- endif %}
{%- if rule.source_port is defined %} {%- if rule.source_port is defined %}
- sport: {{ rule.source_port }} - sport: {{ rule.source_port }}
{%- endif %} {%- endif %}
{%- if rule.destination_network is defined %} {%- if rule.destination_network is defined %}
- destination: {{ rule.destination_network }} - destination: {{ rule.destination_network }}
{%- endif %} {%- endif %}
{%- if rule.log_prefix is defined %}
- log-prefix: '{{ rule.log_prefix }}'
{%- endif %}
{%- if rule.log_level is defined %}
- log-level: {{ rule.log_level }}
{%- endif %}
{%- if rule.limit is defined %}
- limit: '{{ rule.limit }}'
{%- endif %}
{%- if chain.policy is defined %} {%- if chain.policy is defined %}
- require_in: - require_in:
- iptables: iptables_{{ chain_name }}_policy - iptables: iptables_{{ chain_name }}_policy

Loading…
Cancel
Save