require "ipaddr"
node[:networking][:interfaces].each do |name, interface|
- if interface[:role] && role = node[:networking][:roles][interface[:role]]
+ if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
- node.default[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
- node.default[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
+ node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
+ node.set[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
end
- node.default[:networking][:interfaces][name][:metric] = role[:metric]
- node.default[:networking][:interfaces][name][:zone] = role[:zone]
+ node.set[:networking][:interfaces][name][:metric] = role[:metric]
+ node.set[:networking][:interfaces][name][:zone] = role[:zone]
end
prefix = node[:networking][:interfaces][name][:prefix]
- node.default[:networking][:interfaces][name][:netmask] = (~IPAddr.new(interface[:address]).mask(0)).mask(prefix)
- node.default[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
+ node.set[:networking][:interfaces][name][:netmask] = (~IPAddr.new(interface[:address]).mask(0)).mask(prefix)
+ node.set[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
end
template "/etc/network/interfaces" do
next unless gateway[:openvpn]
gateway[:openvpn][:tunnels].each_value do |tunnel|
- if tunnel[:peer][:address]
+ if tunnel[:peer][:address] # ~FC023
route tunnel[:peer][:address] do
netmask "255.255.255.255"
gateway interface[:gateway]
notifies :restart, "service[shorewall]"
end
+template "/etc/logrotate.d/shorewall" do
+ source "logrotate.shorewall.erb"
+ owner "root"
+ group "root"
+ mode 0644
+ variables :name => "shorewall"
+end
+
firewall_rule "limit-icmp-echo" do
action :accept
family :inet
notifies :restart, "service[shorewall6]"
end
+ template "/etc/logrotate.d/shorewall6" do
+ source "logrotate.shorewall.erb"
+ owner "root"
+ group "root"
+ mode 0644
+ variables :name => "shorewall6"
+ end
+
firewall_rule "limit-icmp6-echo" do
action :accept
family :inet6