Revisión 433
Añadido por Francisco Rodrigo hace más de 12 años
| tareas_puppet/servidores_aula/squeeze/ltsp_squid/LEEME | ||
|---|---|---|
|
|
||
|
Francisco Rodrigo López
|
||
|
Administrador informático del IES Javier García Téllez.
|
||
|
29-Marzo-2012
|
||
|
14-Noviembre-2012
|
||
| tareas_puppet/servidores_aula/squeeze/ltsp_squid/manifests/init.pp | ||
|---|---|---|
|
|
||
|
class ltsp_squid {
|
||
|
|
||
|
file { "/etc/network/interfaces.cable":
|
||
|
owner=>root, group=>root, mode=>644,
|
||
|
source=>"puppet:///ltsp_squid/interfaces.cable",
|
||
|
}
|
||
|
|
||
|
file { "/etc/cron.d/debian-edu-config":
|
||
|
owner=>root, group=>root, mode=>644,
|
||
|
source=>"puppet:///ltsp_squid/debian-edu-config",
|
||
|
notify => Exec["reiniciar-cron"],
|
||
|
}
|
||
|
|
||
|
file { "/etc/init.d/squid":
|
||
|
owner=>root, group=>root, mode=>755,
|
||
|
source=>"puppet:///ltsp_squid/squid",
|
||
| ... | ... | |
|
unless => "ls /etc/squid/proxys_intermedios.conf",
|
||
|
}
|
||
|
|
||
|
exec { "reiniciar-cron":
|
||
|
path => "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
||
|
command => "/etc/init.d/cron restart",
|
||
|
require => File["/etc/cron.d/debian-edu-config"],
|
||
|
refreshonly => true,
|
||
|
}
|
||
|
|
||
|
exec { "reiniciar-squid":
|
||
|
path => "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
||
|
command => "/etc/init.d/squid restart;/etc/init.d/deny_https_iptables restart;/etc/init.d/enable-local-proxy restart;/etc/init.d/enable-nat restart",
|
||
| tareas_puppet/servidores_aula/squeeze/ltsp_squid/files/deny_https_iptables | ||
|---|---|---|
|
#----------------------------------------------------------------------------------------
|
||
|
IPTABLES=/sbin/iptables
|
||
|
DENY_HTTPS=/etc/squid/acl/deny_https
|
||
|
RED=`ifconfig | grep Bcast | cut -f2 -d: | awk '{print }' | cut -f1 -d.`
|
||
|
RED=`ifconfig | grep Bcast | grep 192 | cut -f2 -d: | awk '{print }' | cut -f1 -d.`
|
||
|
|
||
|
#iptables -A FORWARD -p tcp --dport 443 -d WEB -j DROP
|
||
|
#iptables -A FORWARD -p tcp --dport 443 -s IP -j DROP
|
||
Exportar a: Unified diff
Actualizada tarea ltsp_squid que corrige fallo en interfaces.cable y desactiva proceso debian-edu-config del cron para que no borre iptables