## confdroid_apache::firewall::iptables.pp
# Module name: confdroid_apache
# Author: 12ww1160 (12ww1160@ConfDroid.com)
# @summary manage firewall settings through cd_firewall or puppetlabs-firewall
###############################################################################
class confdroid_apache::firewall::iptables (

) inherits confdroid_apache::params {
  if $ae_manage_fw == true {
    firewall { "${ae_order_no}${ae_http_port} tcp http port ${ae_http_port}":
      proto  => ['tcp','udp'],
      dport  => $ae_http_port,
      action => 'accept',
    }

    firewall { "${ae_order_no}${ae_https_port} tcp http port ${ae_https_port}":
      proto  => ['tcp','udp'],
      dport  => $ae_https_port,
      action => 'accept',
    }
  }
}