diff --git a/manifests/system.pp b/manifests/system.pp index c0bc708359d8c57c16fd0aaf8eb6245d7902b9b6..fa8bce621904e8b24c3546959e5ab7f76acb59ff 100644 --- a/manifests/system.pp +++ b/manifests/system.pp @@ -28,6 +28,19 @@ class analysator::system::nat { value => '1', } + [ + $analysator::system::internal_iface, + $analysator::system::public_iface, + $analysator::system::ib_iface, + ].each |$iface| { + ['4', '6'].each |$family| { + sysctl { "net.ipv${family}.conf.${iface}.forwarding": + ensure => present, + value => '1', + } + } + } + firewall { '200 forward internal': chain => 'FORWARD', iniface => $analysator::system::internal_iface,