Add a load more cookbooks

[chef.git] / cookbooks / networking / templates / default / shorewall-interfaces.erb

diff --git a/cookbooks/networking/templates/default/shorewall-interfaces.erb b/cookbooks/networking/templates/default/shorewall-interfaces.erb
new file mode 100644 (file)
index 0000000..89d8a2d
--- /dev/null
+++ b/cookbooks/networking/templates/default/shorewall-interfaces.erb
@@ -0,0 +1,13 @@
+# DO NOT EDIT - This file is being maintained by Chef
+
+# ZONE INTERFACE       BROADCAST       OPTIONS
+<% node[:networking][:interfaces].each do |name,interface| -%>
+<% if interface[:family] == "inet" -%>
+<% if interface[:role] == "internal" -%>
+loc    <%= interface[:interface] %>            detect          nosmurfs,tcpflags
+<% elsif interface[:role] == "external" -%>
+net    <%= interface[:interface] %>            detect          nosmurfs,tcpflags
+<% end -%>
+<% end -%>
+<% end -%>
+loc    tun+            detect          nosmurfs,tcpflags