lordcirth / shorewall-formula

Saltstack formula for managing shorewall

Shorewall Salt Formula

Install and configure shorewall directly with SaltStack.

Available states

• shorewall : Installs and configures shorewall distribution package
• shorewall.upnp : Add upnp support. See http://shorewall.net/UPnP.html

Available pillars

You can take a loot at pillar.example to configure Shorewall with pillars.

• Default is to install and configure shorewall for ipv4. If ipv6 is needed it must be configured in pillar.
• Each config item (zone, interface, rule, etc.) is configured for all configured ip versions (ipv4, ipv6) by default. If it is needed for one specific version this can be set in pillar with flag 'ipv': 'ipv: 4' or 'ipv: 6'.

Notes

• NAT is not possible with IPv6, see http://shorewall.net/IPv6Support.html
• For traffic shaping either use simple (tcinterfaces and tcpri) or complex (tcdevices, tcclasses and tcrules)

Run tests

This formula is tested with Kitchen and Inspec in a Docker container.

To run tests you need to

• install Ruby dependencies : bundle install
• run Kitchen : kitchen test