salt.modules.apf¶

Support for Advanced Policy Firewall (APF)¶

maintainer

Mostafa Hussein <mostafa.hussein91@gmail.com>

maturity

new

depends

python-iptables

platform

Linux

salt.modules.apf.allow(ip, port=None)¶

Add host (IP/FQDN) to allow_hosts.rules and immediately load new rule into firewall

CLI Example:

salt '*' apf.allow 127.0.0.1

salt.modules.apf.deny(ip)¶

Add host (IP/FQDN) to deny_hosts.rules and immediately load new rule into firewall

CLI Example:

salt '*' apf.deny 1.2.3.4

salt.modules.apf.disable()¶

Stop (flush) all firewall rules

CLI Example:

salt '*' apf.disable

salt.modules.apf.enable()¶

Load all firewall rules

CLI Example:

salt '*' apf.enable

salt.modules.apf.refresh()¶

Refresh & resolve dns names in trust rules

CLI Example:

salt '*' apf.refresh

salt.modules.apf.reload()¶

Stop (flush) & reload firewall rules

CLI Example:

salt '*' apf.reload

salt.modules.apf.remove(ip)¶

Remove host from [glob]*_hosts.rules and immediately remove rule from firewall

CLI Example:

salt '*' apf.remove 1.2.3.4

salt.modules.apf.running()¶

Check apf status

CLI Example:

salt '*' apf.running