Class | iptables::iptables |
In: |
/tmp/puppet/modules/iptables/manifests/init.pp
|
Parent: |
pre.iptables and post.iptable files This overcomes the sorting problem for the final drop rule
Explicitly allow/drop certain incoming connections
Dont think we need this now. iptables {
"000 drop avahi": proto => "udp", dport => "5353", destination => "224.0.0.251", jump => "DROP",
}
ICMP Rules
iptables { "000 drop icmp ping": proto => "icmp", icmp => "echo-request", jump => "DROP", }
Logging