CDIST-TYPE__PF_RULESET(7)

πŸ’– CDIST-TYPE__PF_RULESET πŸ’–

okay so bestie, welcome to cdist-type__pf_ruleset, the cdist type whose whole entire job is copying a pf(4) ruleset over to $__target_host. no cap. πŸ¦‹


✨ DESCRIPTION ✨

this one lives on *BSD systems and it's the girl who manages the pf firewall's ruleset. she's got main character energy in the packet-filtering department.

and the way that she's also gonna enable and disable the pf firewall for you, exactly as you ask in the state parameter? obsessed. literally does both jobs in one trip. πŸ’…


🌸 REQUIRED PARAMETERS 🌸

  • state β€” either "absent" (meaning: no ruleset at all, we're clearing the whole vibe) or "present". and she defaults to "present" if you don't say anything. πŸŽ€

🧚 OPTIONAL PARAMETERS 🧚

  • source β€” required whenever state is "present", okay?? this is the one that defines the ruleset to load onto the $__target_host for pf(4). so like, if you want pf on, you gotta hand her the file. periodt. ⭐

🌈 EXAMPLES 🌈

removing the current ruleset in place and disabling pf:

# Remove the current ruleset in place and disable pf
__pf_ruleset --state absent

enabling pf with the ruleset defined in $__manifest/files/pf.conf:

# Enable pf with the ruleset defined in $__manifest/files/pf.conf
__pf_ruleset --state present --source $__manifest/files/pf.conf

see? two lines, both iconic. 😭


πŸ‘‘ SEE ALSO πŸ‘‘

pf(4) β€” go read her too, she's the blueprint.


🫢 AUTHORS 🫢

Kamila SoučkovΓ‘ <coding--@--kamila.is> and Jake Guffey <jake.guffey--@--eprotex.com>. absolute legends, both of them. πŸ’œ


πŸ“œ COPYING πŸ“œ

Copyright (C) 2016 Kamila SoučkovΓ‘. Copyright (C) 2012 Jake Guffey. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. so like, go forth and remix, just keep the license. πŸ’–


ungleich GmbH 2021


version 7.0.0, dated Jul 31, 2022 β€” and that's the whole page, bestie. pf rules in, pf rules out, firewall toggled, no notes. slay. πŸŽ€βœ¨
πŸ“¦ where this page comes from