require "ipaddr"
node[:networking][:interfaces].each do |name, interface|
- if interface[:role] && role = node[:networking][:roles][interface[:role]]
+ if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
node.set[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
notifies :restart, "service[shorewall]"
end
+template "/etc/logrotate.d/shorewall" do
+ source "logrotate.shorewall.erb"
+ owner "root"
+ group "root"
+ mode 0644
+ variables :name => "shorewall"
+end
+
firewall_rule "limit-icmp-echo" do
action :accept
family :inet
notifies :restart, "service[shorewall6]"
end
+ template "/etc/logrotate.d/shorewall6" do
+ source "logrotate.shorewall.erb"
+ owner "root"
+ group "root"
+ mode 0644
+ variables :name => "shorewall6"
+ end
+
firewall_rule "limit-icmp6-echo" do
action :accept
family :inet6