Spamhaus drop list needed only on machines with ports open
Patch by alierak.
diffs (19 lines):
diff -r dec97ed3ad7d -r 5ce5fa81e4cf
puppet/modules/iptables/templates/dreamwidth.erb
--- a/puppet/modules/iptables/templates/dreamwidth.erb Wed Jul 15 06:26:12
2009 +0000
+++ b/puppet/modules/iptables/templates/dreamwidth.erb Thu Jul 16 22:52:17
2009 +0000
@@ -62,6 +62,7 @@
-A INPUT -s 10.176.74.79 -j ACCEPT
-A INPUT -s 10.176.74.80 -j ACCEPT
+<% if has_variable?("allowed_ports") && !allowed_ports.empty? -%>
# Discards all traffic to/from netblocks on Spamhaus drop list
# ( see http://www.spamhaus.org/drop/ )
<% droplist = scope.function_template('iptables/spamhaus-drop.erb');
@@ -70,6 +71,7 @@
-A OUTPUT -d <%= dropnet.chomp %> -j DROP
<% end -%>
+<% end -%>
# Accepts all established inbound connections
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
