mirror of
https://github.com/inspec/inspec
synced 2024-12-18 00:53:22 +00:00
22 lines
987 B
Ruby
22 lines
987 B
Ruby
if platform_family?("rhel", "debian", "fedora", "amazon", "suse")
|
|
package value_for_platform_family(
|
|
%w{centos oracle} => %w{iptables iptables-ipv6},
|
|
"default" => [ "iptables" ]
|
|
)
|
|
# IPv4
|
|
execute "iptables -A INPUT -i eth0 -p tcp -m tcp "\
|
|
"--dport 80 -m state --state NEW -m comment "\
|
|
'--comment "http on 80" -j ACCEPT'
|
|
execute "iptables -N derby-cognos-web"
|
|
execute "iptables -A INPUT -j derby-cognos-web"
|
|
execute "iptables -A derby-cognos-web -p tcp -m tcp --dport 80 "\
|
|
'-m comment --comment "derby-cognos-web" -j ACCEPT'
|
|
# IPv6
|
|
execute "ip6tables -A INPUT -i eth0 -p tcp -m tcp "\
|
|
"--dport 80 -m state --state NEW -m comment "\
|
|
'--comment "http v6 on 80" -j ACCEPT'
|
|
execute "ip6tables -N derby-cognos-web-v6"
|
|
execute "ip6tables -A INPUT -j derby-cognos-web-v6"
|
|
execute "ip6tables -A derby-cognos-web-v6 -p tcp -m tcp --dport 80 "\
|
|
'-m comment --comment "derby-cognos-web-v6" -j ACCEPT'
|
|
end
|