Puppet Class: nftables::rules::out::active_directory

Defined in:
manifests/rules/out/active_directory.pp

Summary

manage outgoing active diectory

Overview

Parameters:

  • adserver (Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]]) —

    adserver IPs

  • adserver_ports (Array[Stdlib::Port,1]) (defaults to: [389, 636, 3268, 3269]) —

    adserver ports



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
 
# File 'manifests/rules/out/active_directory.pp', line 5

class nftables::rules::out::active_directory (
  Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $adserver,
  Array[Stdlib::Port,1] $adserver_ports = [389, 636, 3268, 3269],
) {
  Array($adserver, true).each |$index,$as| {
    nftables::rule {
      "default_out-adserver-${index}":
    }
    if $as =~ Stdlib::IP::Address::V6 {
      Nftables::Rule["default_out-adserver-${index}"] {
        content => "ip6 daddr ${as} tcp dport {${join($adserver_ports,', ')}} accept",
      }
    } else {
      Nftables::Rule["default_out-adserver-${index}"] {
        content => "ip daddr ${as} tcp dport {${join($adserver_ports,', ')}} accept",
      }
    }
  }
}