cookbook 'easy-iptables', '~> 0.1.0'
easy-iptables (1) Versions 0.1.0 Follow0
Installs/Configures easy-iptables
cookbook 'easy-iptables', '~> 0.1.0', :supermarket
knife supermarket install easy-iptables
knife supermarket download easy-iptables
easy-iptables Cookbook
Installs and configures iptables.
Requirements
Platform:
- CentOS
- RHEL
Attributes
easy-iptables::default
<table>
<tr>
<th>Key</th>
<th>Type</th>
<th>Description</th>
<th>Default</th>
</tr>
<tr>
<td><tt>['easy-iptables']['tables']</tt></td>
<td>Array</td>
<td>iptables configurations</td>
<td><tt><pre>
[
{
"name" => "filter",
"policies" => [
":INPUT ACCEPT [0:0]",
":FORWARD ACCEPT [0:0]",
":OUTPUT ACCEPT [0:0]"
],
"rules" => [
"-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT",
"-A INPUT -p icmp -j ACCEPT",
"-A INPUT -i lo -j ACCEPT",
"-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT",
"-A INPUT -j REJECT --reject-with icmp-host-prohibited",
"-A FORWARD -j REJECT --reject-with icmp-host-prohibited"
]
}
]
</pre></tt></td>
</tr>
</table>
Usage
easy-iptables::default
Set node['easy-iptables']['tables'] attributes and
include easy-iptables
in your node's run_list
:
{ "easy-iptables": { "tables": [ { "name": "filter", "policies": [ ":INPUT ACCEPT [0:0]", ":FORWARD ACCEPT [0:0]", ":OUTPUT ACCEPT [0:0]" ], "rules": [ "-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT", "-A INPUT -p icmp -j ACCEPT", "-A INPUT -i lo -j ACCEPT", "-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT", "-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT", "-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT", "-A INPUT -j REJECT --reject-with icmp-host-prohibited", "-A FORWARD -j REJECT --reject-with icmp-host-prohibited" ] } ] }, "run_list": [ "recipe[easy-iptables]" ] }
Contributing
- Fork the repository on Github
- Create a named feature branch (like
add_component_x
) - Write you change
- Write tests for your change (if applicable)
- Run the tests, ensuring they all pass
- Submit a Pull Request using Github
License and Authors
Author: Hiroaki Nakamura
Dependent cookbooks
This cookbook has no specified dependencies.
Contingent cookbooks
There are no cookbooks that are contingent upon this one.
Collaborator Number Metric
0.1.0 failed this metric
Failure: Cookbook has 0 collaborators. A cookbook must have at least 2 collaborators to pass this metric.
Contributing File Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Foodcritic Metric
0.1.0 failed this metric
FC064: Ensure issues_url is set in metadata: easy-iptables/metadata.rb:1
FC065: Ensure source_url is set in metadata: easy-iptables/metadata.rb:1
FC066: Ensure chef_version is set in metadata: easy-iptables/metadata.rb:1
FC070: Ensure supports metadata defines valid platforms: easy-iptables/metadata.rb:1
Run with Foodcritic Version 16.3.0 with tags metadata,correctness ~FC031 ~FC045 and failure tags any
No Binaries Metric
0.1.0 passed this metric
Testing File Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
0.1.0 failed this metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Foodcritic Metric
0.1.0 failed this metric
FC064: Ensure issues_url is set in metadata: easy-iptables/metadata.rb:1
FC065: Ensure source_url is set in metadata: easy-iptables/metadata.rb:1
FC066: Ensure chef_version is set in metadata: easy-iptables/metadata.rb:1
FC070: Ensure supports metadata defines valid platforms: easy-iptables/metadata.rb:1
Run with Foodcritic Version 16.3.0 with tags metadata,correctness ~FC031 ~FC045 and failure tags any
No Binaries Metric
0.1.0 passed this metric
Testing File Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
0.1.0 failed this metric
FC065: Ensure source_url is set in metadata: easy-iptables/metadata.rb:1
FC066: Ensure chef_version is set in metadata: easy-iptables/metadata.rb:1
FC070: Ensure supports metadata defines valid platforms: easy-iptables/metadata.rb:1
Run with Foodcritic Version 16.3.0 with tags metadata,correctness ~FC031 ~FC045 and failure tags any
0.1.0 passed this metric
Testing File Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
0.1.0 failed this metric
0.1.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number