require "ipaddr"
+network_packages = []
+
node[:networking][:interfaces].each do |name, interface|
+ network_packages |= ["vlan"] if interface[:interface] =~ /\.\d+$/
+ network_packages |= ["ifenslave"] if interface[:bond]
+
if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
node.set[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
end
+package network_packages
+
template "/etc/network/interfaces" do
source "interfaces.erb"
owner "root"
package "shorewall"
-service "shorewall" do
- action [:enable, :start]
- supports :restart => true
- status_command "shorewall status"
-end
-
template "/etc/default/shorewall" do
source "shorewall-default.erb"
owner "root"
notifies :restart, "service[shorewall]"
end
+service "shorewall" do
+ action [:enable, :start]
+ supports :restart => true
+ status_command "shorewall status"
+end
+
template "/etc/logrotate.d/shorewall" do
source "logrotate.shorewall.erb"
owner "root"
source zone
dest "fw"
proto "udp"
- dest_ports "1194:1196"
- source_ports "1194:1196"
+ dest_ports "1194:1197"
+ source_ports "1194:1197"
end
end
unless node.interfaces(:family => :inet6).empty?
package "shorewall6"
- service "shorewall6" do
- action [:enable, :start]
- supports :restart => true
- status_command "shorewall6 status"
- end
-
template "/etc/default/shorewall6" do
source "shorewall-default.erb"
owner "root"
notifies :restart, "service[shorewall6]"
end
+ service "shorewall6" do
+ action [:enable, :start]
+ supports :restart => true
+ status_command "shorewall6 status"
+ end
+
template "/etc/logrotate.d/shorewall6" do
source "logrotate.shorewall.erb"
owner "root"