package "shorewall"
-service "shorewall" do
- action [:enable, :start]
- supports :restart => true
- status_command "shorewall status"
-end
-
template "/etc/default/shorewall" do
source "shorewall-default.erb"
owner "root"
notifies :restart, "service[shorewall]"
end
+service "shorewall" do
+ action [:enable, :start]
+ supports :restart => true
+ status_command "shorewall status"
+end
+
template "/etc/logrotate.d/shorewall" do
source "logrotate.shorewall.erb"
owner "root"
source zone
dest "fw"
proto "udp"
- dest_ports "1194:1196"
- source_ports "1194:1196"
+ dest_ports "1194:1197"
+ source_ports "1194:1197"
end
end
unless node.interfaces(:family => :inet6).empty?
package "shorewall6"
- service "shorewall6" do
- action [:enable, :start]
- supports :restart => true
- status_command "shorewall6 status"
- end
-
template "/etc/default/shorewall6" do
source "shorewall-default.erb"
owner "root"
notifies :restart, "service[shorewall6]"
end
+ service "shorewall6" do
+ action [:enable, :start]
+ supports :restart => true
+ status_command "shorewall6 status"
+ end
+
template "/etc/logrotate.d/shorewall6" do
source "logrotate.shorewall.erb"
owner "root"