confdroid/confdroid_ssh
1
0
Fork 0
Code Issues Projects Wiki Activity

OP#561 fix fw setting

Browse Source
This commit is contained in:
Arne Teuke
2026-04-09 14:12:26 +02:00
parent 0ddc04dca9
commit 46898aa679
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
manifests/firewall/iptables.pp
View File

@@ -6,7 +6,7 @@
class confdroid_ssh::firewall::iptables ( class confdroid_ssh::firewall::iptables (
) inherits confdroid_ssh::params { ) inherits confdroid_ssh::params {
if $ssh_use_firewall { if $ssh_use_firewall == true {
firewall { "${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}": firewall { "${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}":
ensure => 'present', ensure => 'present',
proto => 'tcp', proto => 'tcp',
@@ -14,5 +14,14 @@ class confdroid_ssh::firewall::iptables (
dport => $ssh_fw_port, dport => $ssh_fw_port,
jump => 'accept', jump => 'accept',
} }
else {
firewall { "${ssh_fw_order}${ssh_fw_port} remove SSH on port ${ssh_fw_port}":
ensure => 'absent',
proto => 'tcp',
source => $ssh_source_range,
dport => $ssh_fw_port,
jump => 'accept',
}
}
} }
} }