This article shows you how to Automate iptables for the whole infrastructure (linux/unix) and maintain the state during the lifecycle of a host. We would need to install 2 modules from PuppetLabs so that we can assign Rules based on the requirements, whether its from one destination to another or from one host to multiple destinations or vice-versa.
- puppetlabs/Firewall = Standard module for iptables.
- puppetlabs/Firewall_multi = Module that takes care off when adding multiple source/destination/ports in one Rule.
