cdist-type__firewalld

cdist-type__firewalld_rule(7)

Nico Schottelius

<nico-cdist--@--schottelius.org>

Table of Contents

1. NAME
2. DESCRIPTION
3. REQUIRED PARAMETERS
4. OPTIONAL PARAMETERS
5. EXAMPLES
6. SEE ALSO
7. COPYING

1. NAME

cdist-type__firewalld_rule - Configure firewalld rules

2. DESCRIPTION

This cdist type allows you to manage rules in firewalld using the direct way (i.e. no zone support).

3. REQUIRED PARAMETERS

rule: The rule to apply. Essentially an firewalld command line without firewalld in front of it.
protocol: Either ipv4, ipv4 or eb. See firewall-cmd(1)
table: The table to use (like filter or nat). See firewall-cmd(1).
chain: The chain to use (like INPUT_direct or FORWARD_direct). See firewall-cmd(1).
priority: The priority to use (0 is topmost). See firewall-cmd(1).

4. OPTIONAL PARAMETERS

state: present or absent, defaults to present

5. EXAMPLES

# Allow acces from entrance.place4.ungleich.ch
__firewalld_rule entrance \
    --protocol ipv4 \
    --table filter \
    --chain INPUT_direct \
    --priority 0 \
    --rule '-s entrance.place4.ungleich.ch -j ACCEPT'

# Allow forwarding of traffic from br0
__firewalld_rule vm-forward --protocol ipv4 \
    --table filter \
    --chain FORWARD_direct \
    --priority 0 \
    --rule '-i br0 -j ACCEPT'

# Ensure old rule is absent - warning, the rule part must stay the same!
__firewalld_rule vm-forward
    --protocol ipv4 \
    --table filter \
    --chain FORWARD_direct \
    --priority 0 \
    --rule '-i br0 -j ACCEPT' \
    --state absent