Remove the predefined iptables rules altogether

This is really an anti pattern as it requires users to fork and modify this cookbook. The LWRP gives them the ability to create a wrapper cookbook that uses the default recipe to install iptables and the LWRP to add specific rules
chef-cookbooks · Mar 20, 2015 · 2dc462c · 2dc462c
1 parent 7efa033
commit 2dc462c
Show file tree

Hide file tree

Showing 6 changed files with 0 additions and 16 deletions.
diff --git a/attributes/default.rb b/attributes/default.rb
diff --git a/recipes/default.rb b/recipes/default.rb
@@ -49,10 +49,3 @@
     variables :iptables_save_file => iptables_save_file
   end
 end
-
-if node['iptables']['install_rules']
-  iptables_rule 'all_established'
-  iptables_rule 'all_icmp'
-  iptables_rule 'prefix'
-  iptables_rule 'postfix'
-end
diff --git a/templates/default/all_established.erb b/templates/default/all_established.erb
diff --git a/templates/default/all_icmp.erb b/templates/default/all_icmp.erb
diff --git a/templates/default/postfix.erb b/templates/default/postfix.erb
diff --git a/templates/default/prefix.erb b/templates/default/prefix.erb