readme.pp

  firewall { '000 allow packets with valid state':
    state => ['RELATED', 'ESTABLISHED'],
    jump  => 'ACCEPT',
  }
  firewall { '001 allow icmp':
    proto => 'icmp',
    jump  => 'ACCEPT',
  }
  firewall { '002 allow all to lo interface':
    iniface => 'lo',
    jump    => 'ACCEPT',
  }
  firewall { '100 allow http':
    proto => 'tcp',
    dport => '80',
    jump  => 'ACCEPT',
  }
  firewall { '100 allow ssh':
    proto => 'tcp',
    dport => '22',
    jump  => 'ACCEPT',
  }
  firewall { '100 allow mysql from internal':
    proto  => 'tcp',
    dport  => '3036',
    source => '10.5.5.0/24',
    jump   => 'ACCEPT',
  }
  firewall { '999 drop everything else':
    jump => 'DROP',
  }

  resources { 'firewall':
    purge => true,
  }