example42 / puppet-iptables

Iptables Puppet Module (for host based firewalling)
http://www.example42.com
Other
14 stars 41 forks source link

Ubuntu /etc/rules.v4 & .v6 #6

Closed Freeaqingme closed 11 years ago

Freeaqingme commented 11 years ago

Hi,

I'm trying to use the puppet-iptables module. I'm noticing that the /etc/iptables/rules file is filled with the proper contents. However, when I do 'iptables -L' none of those (no rules) show up.

The file /etc/init.d/iptables-persistent loads two files: /etc/iptables/rules.v4 & /etc/iptables/rules.v6

Am I missing something here, or is Ubuntu 12.04 not supported (yet)?

Tnx.

Freeaqingme

Freeaqingme commented 11 years ago

@example42 Could you let me know if you have any fix for this, preferably included ipv6 support? If not, I will try to think of something myself (and of course supply a pull request ;))

alvagante commented 11 years ago

Hi, haven't had the occasion to look at this. To fix this to work on Ubuntu 12.04, at least for IPv4 you can just work on: $config_file = $::operatingsystem ? { /(?i:Debian|Ubuntu|Mint)/ => '/etc/iptables/rules', default => '/etc/sysconfig/iptables', } in params.pp Should become something like: $config_file = $::operatingsystem ? { /(?i:Debian|Mint)/ => '/etc/iptables/rules', Ubuntu => $::operatingsystemrelease ? { '12.04' => '/etc/iptables/rules.v4', default => '/etc/iptables/rules', } default => '/etc/sysconfig/iptables', }

Please test this and pull request if it works ;-)

For IPV6 support something more is needed.

sathieu commented 11 years ago

This bud should be closed now: https://github.com/example42/puppet-iptables/pull/7

Freeaqingme commented 11 years ago

Sweet, I had preliminary fixed this using a symlink.

However, IPv6 still isn't supported, so in that regard this issue is still valid. Updating description, may implement something myself initially ;)

Freeaqingme commented 11 years ago

Edit: for clarity I"ll add a new issue.

=> closed