Experiences managing iptables


#1

Hi,

Apart from using opscode/37signals iptables cookbook, is there any
other experience of managing iptables with chef?

Thanks :slight_smile:

Jacobo García López de Araujo
blog: http://robotplaysguitar.com
http://workingwithrails.com/person/13395-jacobo-garc-a


#2

On 21 July 2010 15:57, Jacobo García jacobo.garcia@gmail.com wrote:

Apart from using opscode/37signals iptables cookbook, is there any
other experience of managing iptables with chef?

I implemented a cookbook using node attributes to define firewall
rules at one point, but ended up not using it because it seemed to
overcomplicate matters for the infrastructure I eventually settled on.

It did work quite well for an environment where all traffic is routed
through a single machine and NATed though, allow nodes to specify the
ports and IP addresses they wanted forwarded to them.