Shorewall Salt Formula

Install and configure shorewall directly with SaltStack.

Available states

shorewall : Installs and configures shorewall distribution package
shorewall.upnp : Add upnp support. See http://shorewall.net/UPnP.html

Available pillars

You can take a loot at pillar.example to configure Shorewall with pillars.

Default is to install and configure shorewall for ipv4. If ipv6 is needed it must be configured in pillar.
Each config item (zone, interface, rule, etc.) is configured for all configured ip versions (ipv4, ipv6) by default. If it is needed for one specific version this can be set in pillar with flag 'ipv': 'ipv: 4' or 'ipv: 6'.

Notes

NAT is not possible with IPv6, see http://shorewall.net/IPv6Support.html
For traffic shaping either use simple (tcinterfaces and tcpri) or complex (tcdevices, tcclasses and tcrules)

Run tests

This formula is tested with Kitchen and Inspec in a Docker container.

To run tests you need to

install Ruby dependencies : bundle install
run Kitchen : kitchen test