2 define rule($domain="ip", $chain="INPUT", $rule, $description="", $prio="00") {
3 file { "/etc/ferm/dsa.d/${prio}_${name}":
8 content => template("ferm/ferm-rule.erb"),
9 notify => Exec["ferm restart"],
13 # realize (i.e. enable) all @ferm::rule virtual resources
16 package { ferm: ensure => installed }
24 source => "puppet:///files/empty/",
25 require => Package["ferm"];
28 require => Package["ferm"];
30 source => "puppet:///ferm/ferm.default",
31 require => Package["ferm"],
32 notify => Exec["ferm restart"];
33 "/etc/ferm/ferm.conf":
34 source => "puppet:///ferm/ferm.conf",
35 require => Package["ferm"],
37 notify => Exec["ferm restart"];
38 "/etc/ferm/conf.d/me.conf":
39 content => template("ferm/me.conf.erb"),
40 require => Package["ferm"],
42 notify => Exec["ferm restart"];
43 "/etc/ferm/conf.d/defs.conf":
44 content => template("ferm/defs.conf.erb"),
45 require => Package["ferm"],
47 notify => Exec["ferm restart"];
48 "/etc/ferm/conf.d/interfaces.conf":
49 content => template("ferm/interfaces.conf.erb"),
50 require => Package["ferm"],
52 notify => Exec["ferm restart"];
55 $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',')
57 activate_munin_check {
58 $munin_ips: script => "ip_";
61 exec { "ferm restart":
62 command => "/etc/init.d/ferm restart",