owner "root"
group "root"
mode 0644
- variables :family => "inet", :rules => []
+ variables :rules => []
notifies :restart, resources(:service => "shorewall")
end
dest "fw"
proto "icmp"
dest_ports "echo-request"
- if node[:lsb][:release].to_f >= 10.04
- rate_limit "s:1/sec:5"
- else
- rate_limit "1/sec:5"
- end
+ rate_limit "s:1/sec:5"
end
[ "ucl", "ic", "bm" ].each do |zone|
owner "root"
group "root"
mode 0644
- variables :family => "inet6", :rules => []
+ variables :rules => []
notifies :restart, resources(:service => "shorewall6")
end
dest "fw"
proto "ipv6-icmp"
dest_ports "echo-request"
- if node[:lsb][:release].to_f >= 10.04
- rate_limit "s:1/sec:5"
- else
- rate_limit "1/sec:5"
- end
+ rate_limit "s:1/sec:5"
end
end