# Puppet Class: confdroid_postgresql::firewall::iptables

Inherits:
  confdroid_postgresql::params

Defined in:
  manifests/firewall/iptables.pp

## Summary

Class manages the alloy iptables

## Overview

confdroid_postgresql::firewall::iptables.pp Module name: confdroid_postgresql Author: 12ww1160 (12ww1160@confdroid.com)

    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25

    # File 'manifests/firewall/iptables.pp', line 6

    class confdroid_postgresql::firewall::iptables (

    ) inherits confdroid_postgresql::params {
      if ($fqdn == $pl_server_fqdn) and ($pl_enable_fw == true) {
        firewall { "${pl_fw_rule_order}${pl_fw_port} tcp port ${pl_fw_port}":
          source => $pl_source_range,
          proto  => 'tcp',
          dport  => $pl_fw_port,
          jump   => 'accept',
        }
        if $pl_use_pg_bouncer == true {
          firewall { "${pl_fw_rule_order}${pl_bouncer_port} tcp port ${pl_bouncer_port}":
            source => $pl_source_range,
            proto  => 'tcp',
            dport  => $pl_bouncer_port,
            jump   => 'accept',
          }
        }
      }
    }