How do you modify the default settings for the internal firewall chains using the firewall module?

[Trevor Vaughan]

The documentation seems to indicate that I can do something like:

firewallchain { ':INPUT:IP': policy => 'drop' }

But this doesn't work.

Thanks,

Trevor

--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvau...@onyxpoint.com

-- This account not approved for unencrypted proprietary information --

[Chris O'Donnell]

I just went through this last week. This isn't available in the stable 0.4 release from puppetforge, you need to get the current master branch from https://github.com/kbarber/puppetlabs-firewall

Once you get this, you can do this:

    firewallchain { 'INPUT:filter:IPv4':

        policy    => 'drop',

    }

Note I've not tried formatting my rules as you have, but the above worked for me. Also note that this has only been in the master branch in Github for about a week, so if you find a bug, please submit it.

- Chris