salt.modules.apf¶
Support for Advanced Policy Firewall (APF)¶
- maintainer:
Mostafa Hussein <mostafa.hussein91@gmail.com>
- maturity:
new
- depends:
python-iptables
- platform:
Linux
- salt.modules.apf.allow(ip, port=None)¶
Add host (IP/FQDN) to allow_hosts.rules and immediately load new rule into firewall
CLI Example:
salt '*' apf.allow 127.0.0.1
- salt.modules.apf.deny(ip)¶
Add host (IP/FQDN) to deny_hosts.rules and immediately load new rule into firewall
CLI Example:
salt '*' apf.deny 1.2.3.4
- salt.modules.apf.disable()¶
Stop (flush) all firewall rules
CLI Example:
salt '*' apf.disable
- salt.modules.apf.enable()¶
Load all firewall rules
CLI Example:
salt '*' apf.enable
- salt.modules.apf.refresh()¶
Refresh & resolve dns names in trust rules
CLI Example:
salt '*' apf.refresh
- salt.modules.apf.reload()¶
Stop (flush) & reload firewall rules
CLI Example:
salt '*' apf.reload
- salt.modules.apf.remove(ip)¶
Remove host from [glob]*_hosts.rules and immediately remove rule from firewall
CLI Example:
salt '*' apf.remove 1.2.3.4
- salt.modules.apf.running()¶
Check apf status
CLI Example:
salt '*' apf.running
