iptables-services

Description

Install and configure iptables-services, an easy and clear way to manage
iptables firewall with save/restore feature.

Also ensure that the configured rules are effectively the same that iptable
uses. Any rules added directly on the host will be removed and any removed
rule will be readded.

Requirements

Cookbooks and gems

Declared in [metadata.rb](metadata.rb) and in [Gemfile](Gemfile).

Platforms

• RHEL Family 7, tested on Centos

It should work with other systemd platform with the good 'config' attributes.
Complete support and tests will come if requested.

Usage

Setup

Add recipe[iptables-services] in your run-list to install iptables-services
using package. By default the rules of your ditribution are applied (accept
everything). IPV4 and IPV6 are both activated by default.

Test

This cookbook is fully tested by kitchen and a vagrant box.

For more information, see [.kitchen.yml](.kitchen.yml) and [test](test)
directory.

Attributes

Configuration is done by overriding default attributes. All configuration keys
have a default defined in [attributes/default.rb](attributes/default.rb).
Please read it to have a comprehensive view of what and how you can configure
this cookbook behavior.

Recipes

default

Include install and config recipes.

install

Install iptables-services by using package.

config

Configure iptables, restart it if there is any configuration change (new rules
in attributes) or if its current configuration is not in sync (modification
done on the host directly, adding or removing a rule).

Finally, enable and start the service if necessary.

Changelog

Available in [CHANGELOG.md](CHANGELOG.md).

Contributing

Please read carefully [CONTRIBUTING.md](CONTRIBUTING.md) before making a merge
request.

License and Author

• Author:: Vincent Baret (vbaret@gmail.com)
• Author:: Samuel Bernard (samuel.bernard@gmail.com)

Copyright (c) 2017 Make.org

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.