From fa403c7eb2687ed007a843a6560d373b41a01905 Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Mon, 21 Jan 2013 12:18:44 +0000 Subject: [PATCH] stop tracking output as well Signed-off-by: Stephen Gran --- modules/named/manifests/init.pp | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp index 83647911..9cc377e6 100644 --- a/modules/named/manifests/init.pp +++ b/modules/named/manifests/init.pp @@ -24,6 +24,14 @@ class named { rule => 'proto (tcp udp) dport 53 jump NOTRACK' } + @ferm::rule { 'dsa-bind-notrack-out': + domain => '(ip ip6)', + description => 'NOTRACK for nameserver traffic', + table => 'raw', + chain => 'PREROUTING', + rule => 'proto (tcp udp) sport 53 jump NOTRACK' + } + file { '/var/log/bind9': ensure => directory, owner => bind, -- 2.39.2