2 define rule($domain="ip", $chain="INPUT", $rule, $description="", $prio="00") {
3 file { "/etc/ferm/dsa.d/${prio}_${name}":
8 content => template("ferm/ferm-rule.erb"),
9 notify => Exec["ferm restart"],
13 # realize (i.e. enable) all @ferm::rule virtual resources
16 package { ferm: ensure => installed }
24 source => "puppet:///files/empty/",
25 require => Package["ferm"];
28 require => Package["ferm"];
29 "/etc/ferm/ferm.conf":
30 source => "puppet:///ferm/ferm.conf",
31 require => Package["ferm"],
33 notify => Exec["ferm restart"];
34 "/etc/ferm/conf.d/me.conf":
35 content => template("ferm/me.conf.erb"),
36 require => Package["ferm"],
38 notify => Exec["ferm restart"];
39 "/etc/ferm/conf.d/defs.conf":
40 content => template("ferm/defs.conf.erb"),
41 require => Package["ferm"],
43 notify => Exec["ferm restart"];
44 "/etc/ferm/conf.d/interfaces.conf":
45 content => template("ferm/interfaces.conf.erb"),
46 require => Package["ferm"],
48 notify => Exec["ferm restart"];
51 $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',')
53 activate_munin_check {
54 $munin_ips: script => "ip_";
57 exec { "ferm restart":
58 command => "/etc/init.d/ferm restart",