Révision 53aa1fa8
Add firewall rule for incoming rsync requests
REFERENCE.md | ||
---|---|---|
85 | 85 |
* [`nftables::rules::puppet`](#nftables--rules--puppet): manage in puppet |
86 | 86 |
* [`nftables::rules::pxp_agent`](#nftables--rules--pxp_agent): manage in pxp-agent |
87 | 87 |
* [`nftables::rules::qemu`](#nftables--rules--qemu): Bridged network configuration for qemu/libvirt |
88 |
* [`nftables::rules::rsync`](#nftables--rules--rsync): allow rsync connections |
|
88 | 89 |
* [`nftables::rules::samba`](#nftables--rules--samba): manage Samba, the suite to allow Windows file sharing on Linux resources. |
89 | 90 |
* [`nftables::rules::smtp`](#nftables--rules--smtp): manage in smtp |
90 | 91 |
* [`nftables::rules::smtp_submission`](#nftables--rules--smtp_submission): manage in smtp submission |
... | ... | |
1470 | 1471 |
|
1471 | 1472 |
Default value: `true` |
1472 | 1473 |
|
1474 |
### <a name="nftables--rules--rsync"></a>`nftables::rules::rsync` |
|
1475 |
|
|
1476 |
allow rsync connections |
|
1477 |
|
|
1473 | 1478 |
### <a name="nftables--rules--samba"></a>`nftables::rules::samba` |
1474 | 1479 |
|
1475 | 1480 |
manage Samba, the suite to allow Windows file sharing on Linux resources. |
manifests/rules/rsync.pp | ||
---|---|---|
1 |
# @summary allow rsync connections |
|
2 |
class nftables::rules::rsync { |
|
3 |
nftables::rule { |
|
4 |
'default_in-rsync': |
|
5 |
content => 'tcp dport 873 accept', |
|
6 |
} |
|
7 |
} |
spec/acceptance/all_rules_spec.rb | ||
---|---|---|
103 | 103 |
include nftables::rules::igmp |
104 | 104 |
include nftables::rules::wsd |
105 | 105 |
include nftables::rules::ftp |
106 |
include nftables::rules::rsync |
|
106 | 107 |
include nftables::rules::out::igmp |
107 | 108 |
include nftables::rules::out::mldv2 |
108 | 109 |
include nftables::rules::out::mdns |
spec/classes/rules/rsync_spec.rb | ||
---|---|---|
1 |
# frozen_string_literal: true |
|
2 |
|
|
3 |
require 'spec_helper' |
|
4 |
|
|
5 |
describe 'nftables::rules::rsync' do |
|
6 |
on_supported_os.each do |os, os_facts| |
|
7 |
context "on #{os}" do |
|
8 |
let(:facts) { os_facts } |
|
9 |
|
|
10 |
context 'default options' do |
|
11 |
it { is_expected.to compile } |
|
12 |
it { is_expected.to contain_nftables__rule('default_in-rsync').with_content('tcp dport 873 accept') } |
|
13 |
end |
|
14 |
end |
|
15 |
end |
|
16 |
end |
Formats disponibles : Unified diff