mirror of
https://github.com/inspec/inspec
synced 2024-12-18 17:14:33 +00:00
28 lines
1.1 KiB
Ruby
28 lines
1.1 KiB
Ruby
if platform_family?("rhel", "debian", "amazon", "suse")
|
|
package "iptables"
|
|
if platform?("centos", "oracle")
|
|
package value_for_platform([ "centos", "oracle" ] => {"< 8" => "iptables-ipv6", ">= 8" => "iptables"})
|
|
end
|
|
end
|
|
|
|
if platform_family?("rhel", "debian", "fedora", "amazon", "suse")
|
|
# IPv4
|
|
execute "iptables -A INPUT -i eth0 -p tcp -m tcp "\
|
|
"--dport 80 -m state --state NEW -m comment "\
|
|
'--comment "http on 80" -j ACCEPT'
|
|
execute "iptables -N derby-cognos-web"
|
|
execute "iptables -A INPUT -j derby-cognos-web"
|
|
execute "iptables -A derby-cognos-web -p tcp -m tcp --dport 80 "\
|
|
'-m comment --comment "derby-cognos-web" -j ACCEPT'
|
|
|
|
if ENV['IPV6']
|
|
# IPv6
|
|
execute "ip6tables -A INPUT -i eth0 -p tcp -m tcp "\
|
|
"--dport 80 -m state --state NEW -m comment "\
|
|
'--comment "http v6 on 80" -j ACCEPT'
|
|
execute "ip6tables -N derby-cognos-web-v6"
|
|
execute "ip6tables -A INPUT -j derby-cognos-web-v6"
|
|
execute "ip6tables -A derby-cognos-web-v6 -p tcp -m tcp --dport 80 "\
|
|
'-m comment --comment "derby-cognos-web-v6" -j ACCEPT'
|
|
end
|
|
end
|