NAME

Rex::Resource::firewall - Firewall functions

DESCRIPTION

With this module it is easy to manage different firewall systems.

SYNOPSIS

            

              
              
# Configure a particular rule
task "configure_firewall", "server01", sub {
  firewall "some-name",
    ensure      => "present",
    proto       => "tcp",
    action      => "accept",
    source      => "192.168.178.0/24",
    destination => "192.168.1.0/24",
    sport       => 80,
    sapp        => 'www',    # source application, if provider supports it
    port        => 80,       # same as dport
    dport       => 80,
    app         => 'www',    # same as dapp, destination application, if provider supports it
    dapp        => 'www',    # destination application, if provider supports it
    tcp_flags   => ["FIN", "SYN", "RST"],
    chain       => "INPUT",
    table       => "nat",
    jump        => "LOG",
    iniface     => "eth0",
    outiface    => "eth1",
    reject_with => "icmp-host-prohibited",
    log         => "new|all",  # if provider supports it
    log_level   => "",         # if provider supports it
    log_prefix  => "FW:",      # if provider supports it
    state       => "NEW",
    ip_version  => -4;         # for iptables provider. valid options -4 and -6
};
# Add overall logging (if provider supports)
firewall "some-name",
  provider => 'ufw',
  logging  => "medium";
            
          

EXPORTED RESOURCES

firewall($name, %params)