SIMPLE SOLUTIONS

CDIST-TYPE__FIREWALLD_RULE(7) - Linux man page online | Overview, conventions, and miscellany

Configure firewalld rules.

Chapter
Dec 18, 2016
CDIST-TYPE__FIREWALLD_RULE(7) cdist CDIST-TYPE__FIREWALLD_RULE(7)

NAME

cdist-type__firewalld_rule - Configure firewalld rules

DESCRIPTION

This cdist type allows you to manage rules in firewalld using the direct way (i.e. no zone support).

REQUIRED PARAMETERS

rule The rule to apply. Essentially an firewalld command line without firewalld in front of it. protocol Either ipv4, ipv4 or eb. See firewall-cmd(1) table The table to use (like filter or nat). See firewall-cmd(1). chain The chain to use (like INPUT_direct or FORWARD_direct). See firewall-cmd(1). priority The priority to use (0 is topmost). See firewall-cmd(1).

OPTIONAL PARAMETERS

state 'present' or 'absent', defaults to 'present'

EXAMPLES

# Allow acces from entrance.place4.ungleich.ch __firewalld_rule entrance \ --protocol ipv4 \ --table filter \ --chain INPUT_direct \ --priority 0 \ --rule '-s entrance.place4.ungleich.ch -j ACCEPT' # Allow forwarding of traffic from br0 __firewalld_rule vm-forward --protocol ipv4 \ --table filter \ --chain FORWARD_direct \ --priority 0 \ --rule '-i br0 -j ACCEPT' # Ensure old rule is absent - warning, the rule part must stay the same! __firewalld_rule vm-forward --protocol ipv4 \ --table filter \ --chain FORWARD_direct \ --priority 0 \ --rule '-i br0 -j ACCEPT' \ --state absent

SEE ALSO

cdist-type__iptables_rule(7), firewalld(8)

AUTHORS

Nico Schottelius <nico-cdist--@--schottelius.org>

COPYING

Copyright (C) 2015 Nico Schottelius. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
4.4.1 Dec 18, 2016 CDIST-TYPE__FIREWALLD_RULE(7)
This manual Reference Other manuals
cdist-type__firewalld_rule(7) referred by
refer to cdist-type__iptables_rule(7) | firewall-cmd(1)
Download raw manual
Main page cdist (+123) 4.4.1 (+123) № 7 (+1560)
Go top