|
class limitar_https {
|
|
|
|
file { "/etc/network/iptables":
|
|
owner => root, group=>root, mode=>644,
|
|
source => "puppet:///puppet.educarex.es/files/iptables",
|
|
notify => Exec["configurar-https"]
|
|
}
|
|
|
|
file { "/etc/network/deny_https.ies":
|
|
owner => root, group=>root, mode=>644,
|
|
ensure => exists,
|
|
notify => Exec["configurar-https"],
|
|
}
|
|
|
|
file { "/etc/init.d/deny_https":
|
|
owner => root, group=>root, mode=>755,
|
|
source => "puppet:///puppet.educarex.es/files/deny_https",
|
|
notify => Exec["configurar-https"],
|
|
}
|
|
|
|
exec { "configurar-https":
|
|
command => "/usr/sbin/update-rc.d deny_https start 31 2 3 4 5 . stop 01 0 1 6 . ; /etc/init.d/deny_https start",
|
|
require => File["/etc/init.d/deny_https"],
|
|
unless => "/bin/ls /etc/rc2.d/S31deny_https",
|
|
refreshonly => true,
|
|
}
|
|
|
|
}
|