root / manifests / rules / wsd.pp @ 02d6e88a
Historique | Voir | Annoter | Télécharger (603 octets)
| 1 | ffc8b86f | Tim Meusel | # |
|---|---|---|---|
| 2 | # @summary allow incoming webservice discovery |
||
| 3 | # |
||
| 4 | # @param ipv4 Allow ws-discovery over IPv4 |
||
| 5 | # @param ipv6 Allow ws-discovery over IPv6 |
||
| 6 | # |
||
| 7 | # @see https://docs.oasis-open.org/ws-dd/ns/discovery/2009/01 |
||
| 8 | # |
||
| 9 | class nftables::rules::wsd ( |
||
| 10 | Boolean $ipv4 = true, |
||
| 11 | Boolean $ipv6 = true, |
||
| 12 | ) {
|
||
| 13 | if $ipv4 {
|
||
| 14 | nftables::rule { 'default_in-wsd_v4':
|
||
| 15 | content => 'ip daddr 239.255.255.250 udp dport 3702 accept comment "accept ws-discovery"', |
||
| 16 | } |
||
| 17 | } |
||
| 18 | if $ipv6 {
|
||
| 19 | nftables::rule { 'default_in-wsd_v6':
|
||
| 20 | content => 'ip6 daddr ff02::c udp dport 3702 accept comment "accept ws-discovery"', |
||
| 21 | } |
||
| 22 | } |
||
| 23 | } |