salt
/
iptables-formula
sforkowany z ExternalMirrors/iptables-formula
Obserwuj 1
Polub 0
Forkuj 0
Kod Wydania 6 Aktywność
Saltstack Official IPTables Formula
Nie możesz wybrać więcej, niż 25 tematów Tematy muszą się zaczynać od litery lub cyfry, mogą zawierać myślniki ('-') i mogą mieć do 35 znaków.
7 Commity
2 Gałęzie
Drzewo: 21c93fb4e5
Gałęzie Tagi
${ item.name }
Utwórz gałąź ${ searchTerm }
z '21c93fb4e5'
${ noResults }
iptables-formula/iptables/service.sls

92 lines
2.3KB
Czysty Wina Historia 

  1. {% from "iptables/map.jinja" import service with context %}

  2. 

  3. {%- if pillar.iptables.service.enabled %}

  4. 

  5. iptables_packages:

  6.   pkg.installed:

  7.   - names: {{ service.pkgs }}

  8. 

  9. iptables_services:

  10.   service.dead:

  11.   - enable: true

  12.   - name: {{ service.service }}

  13.   - sig: test -e /etc/iptables/rules.v4

  14.   - require:

  15.     - pkg: iptables_packages

  16. 

  17. {%- for chain_name, chain in service.get('chain', {}).iteritems() %}

  18. 

  19. {%- if chain.policy is defined %}

  20. iptables_{{ chain_name }}_policy:

  21.   iptables.set_policy:

  22.     - chain: {{ chain_name }}

  23.     - policy: {{ chain.policy }}

  24.     - table: filter

  25. {%- endif %}

  26. 

  27. {%- for rule_name, rule in chain.get('rule', {}).iteritems() %}

  28. 

  29. iptables_{{ chain_name }}_{{ rule_name }}:

  30.   iptables.insert:

  31.   {%- if rule.position is defined %}

  32.   - position: {{ rule.position }}

  33.   {%- endif %}

  34.   {%- if rule.table is defined %}

  35.   - table: {{ rule.table }}

  36.   {%- endif %}

  37.   - chain: {{ chain_name }}

  38.   {%- if rule.jump is defined %}

  39.   - jump: {{ rule.jump }}

  40.   {%- endif %}

  41.   {%- if rule.match is defined %}

  42.   - match: {{ rule.match }}

  43.   {%- endif %}

  44.   {%- if rule.connection_state is defined %}

  45.   - connstate: {{ rule.connection_state }}

  46.   {%- endif %}

  47.   {%- if rule.protocol is defined %}

  48.   - proto: {{ rule.protocol }}

  49.   {%- endif %}

  50.   {%- if rule.destination_port is defined %}

  51.   - dport: {{ rule.destination_port }}

  52.   {%- endif %}

  53.   {%- if rule.source_port is defined %}

  54.   - sport: {{ rule.source_port }}

  55.   {%- endif %}

  56.   {%- if rule.in_interface is defined %}

  57.   - in-interface: {{ rule.in_interface }}

  58.   {%- endif %}

  59.   {%- if rule.out_interface is defined %}

  60.   - out-interface: {{ rule.out_interface }}

  61.   {%- endif %}

  62.   {%- if rule.to_destination is defined %}

  63.   - to-destination: {{ rule.to_destination }}

  64.   {%- endif %}

  65.   {%- if rule.to_source is defined %}

  66.   - to-source: {{ rule.to_source }}

  67.   {%- endif %}

  68.   {%-  if rule.source_network is defined %}

  69.   - source: {{ rule.source_network }}

  70.   {%- endif %}

  71.   {%-  if rule.destination_network is defined %}

  72.   - destination: {{ rule.destination_network }}

  73.   {%- endif %}

  74.   {%- if chain.policy is defined %}

  75.   - require_in: 

  76.     - iptables: iptables_{{ chain_name }}_policy:

  77.   {%- endif %}

  78.   - save: True

  79. 

  80. {%- endfor %}

  81. 

  82. {%- endfor %}

  83. 

  84. {%- else %}

  85. 

  86. iptables_services:

  87.   service.dead:

  88.   - enable: false

  89.   - name: {{ service.service }}

  90. 

  91. {%- endif %}