Puppet Class: psick::firewall::simple_nat

Defined in:
manifests/firewall/simple_nat.pp

Overview

Simple psick to manage a NAT server that allow full access from the specified $source_net.

This psick needs the following modules: example42/sysctl puppetlabs/firewall

Parameters:

  • source_net (String) (defaults to: "${facts['networking']['network']}/${facts['networking']['netmask']}")
  • manage (Boolean) (defaults to: $psick::manage)
  • noop_manage (Boolean) (defaults to: $psick::noop_manage)
  • noop_value (Boolean) (defaults to: $psick::noop_value) 


8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
 
# File 'manifests/firewall/simple_nat.pp', line 8

class psick::firewall::simple_nat (
  String $source_net = "${facts['networking']['network']}/${facts['networking']['netmask']}",
  Boolean          $manage               = $psick::manage,
  Boolean          $noop_manage          = $psick::noop_manage,
  Boolean          $noop_value           = $psick::noop_value,
) {
  if $manage {
    if $noop_manage {
      noop($noop_value)
    }
    psick::sysctl::set { 'net/ipv4/ip_forward': value => '1' }
    firewall { "100 snat for network ${source_net}":
      chain  => 'POSTROUTING',
      jump   => 'MASQUERADE',
      proto  => 'all',
      source => $source_net,
      table  => 'nat',
    }
    firewall { "100 forward for network ${source_net}":
      chain  => 'FORWARD',
      jump   => 'ACCEPT',
      proto  => 'all',
      source => $source_net,
    }
  }
}