Propellor.Property.Firewall

Properties for configuring firewall (iptables) rules

Documentation

rule :: Chain -> Table -> Target -> Rules -> Property Linux

installed :: Property DebianLike

data Chain

Constructors

INPUT

OUTPUT

FORWARD

PREROUTING

POSTROUTING

ChainCustom String

Instances

Eq Chain

Methods

(==) :: Chain -> Chain -> Bool

(/=) :: Chain -> Chain -> Bool

Show Chain

Methods

showsPrec :: Int -> Chain -> ShowS

show :: Chain -> String

showList :: [Chain] -> ShowS

ConfigurableValue Chain

Methods

val :: Chain -> String

data Table

Constructors

Filter

Nat

Mangle

Raw

Security

Instances

Eq Table

Methods

(==) :: Table -> Table -> Bool

(/=) :: Table -> Table -> Bool

Show Table

Methods

showsPrec :: Int -> Table -> ShowS

show :: Table -> String

showList :: [Table] -> ShowS

ConfigurableValue Table

Methods

val :: Table -> String

data Target

Constructors

ACCEPT

REJECT

DROP

LOG

TargetCustom String

Instances

Eq Target

Methods

(==) :: Target -> Target -> Bool

(/=) :: Target -> Target -> Bool

Show Target

Methods

showsPrec :: Int -> Target -> ShowS

show :: Target -> String

showList :: [Target] -> ShowS

ConfigurableValue Target

Methods

val :: Target -> String

data Proto

Constructors

TCP

UDP

ICMP

Instances

Eq Proto

Methods

(==) :: Proto -> Proto -> Bool

(/=) :: Proto -> Proto -> Bool

Show Proto

Methods

showsPrec :: Int -> Proto -> ShowS

show :: Proto -> String

showList :: [Proto] -> ShowS

data Rules

Constructors

Everything

Proto Proto

There is actually some order dependency between proto and port so this should be a specific data type with proto + ports

DPort Port

DPortRange (Port, Port)

InIFace Interface

OutIFace Interface

Ctstate [ConnectionState]

ICMPType ICMPTypeMatch

RateLimit Frequency

TCPFlags TCPFlagMask TCPFlagComp

TCPSyn

GroupOwner Group

Source [IPWithMask]

Destination [IPWithMask]

NotDestination [IPWithMask]

NatDestination IPAddr (Maybe Port)

Rules :- Rules infixl 0

Combine two rules

Instances

Eq Rules

Methods

(==) :: Rules -> Rules -> Bool

(/=) :: Rules -> Rules -> Bool

Show Rules

Methods

showsPrec :: Int -> Rules -> ShowS

show :: Rules -> String

showList :: [Rules] -> ShowS

Monoid Rules

Methods

mempty :: Rules

mappend :: Rules -> Rules -> Rules

mconcat :: [Rules] -> Rules

data ConnectionState

Constructors

ESTABLISHED

RELATED

NEW

INVALID

Instances

Eq ConnectionState

Methods

(==) :: ConnectionState -> ConnectionState -> Bool

(/=) :: ConnectionState -> ConnectionState -> Bool

Show ConnectionState

Methods

showsPrec :: Int -> ConnectionState -> ShowS

show :: ConnectionState -> String

showList :: [ConnectionState] -> ShowS

data ICMPTypeMatch

Constructors

ICMPTypeName String

ICMPTypeCode Int

Instances

Eq ICMPTypeMatch

Methods

(==) :: ICMPTypeMatch -> ICMPTypeMatch -> Bool

(/=) :: ICMPTypeMatch -> ICMPTypeMatch -> Bool

Show ICMPTypeMatch

Methods

showsPrec :: Int -> ICMPTypeMatch -> ShowS

show :: ICMPTypeMatch -> String

showList :: [ICMPTypeMatch] -> ShowS

ConfigurableValue ICMPTypeMatch

Methods

val :: ICMPTypeMatch -> String

data TCPFlag

Constructors

SYN

ACK

FIN

RST

URG

PSH

ALL

NONE

Instances

Eq TCPFlag

Methods

(==) :: TCPFlag -> TCPFlag -> Bool

(/=) :: TCPFlag -> TCPFlag -> Bool

Show TCPFlag

Methods

showsPrec :: Int -> TCPFlag -> ShowS

show :: TCPFlag -> String

showList :: [TCPFlag] -> ShowS

data Frequency

Constructors

NumBySecond Int

Instances

Eq Frequency

Methods

(==) :: Frequency -> Frequency -> Bool

(/=) :: Frequency -> Frequency -> Bool

Show Frequency

Methods

showsPrec :: Int -> Frequency -> ShowS

show :: Frequency -> String

showList :: [Frequency] -> ShowS

ConfigurableValue Frequency

Methods

val :: Frequency -> String

data IPWithMask

Constructors

IPWithNoMask IPAddr

IPWithIPMask IPAddr IPAddr

IPWithNumMask IPAddr Int

Instances

Eq IPWithMask

Methods

(==) :: IPWithMask -> IPWithMask -> Bool

(/=) :: IPWithMask -> IPWithMask -> Bool

Show IPWithMask

Methods

showsPrec :: Int -> IPWithMask -> ShowS

show :: IPWithMask -> String

showList :: [IPWithMask] -> ShowS

ConfigurableValue IPWithMask

Methods

val :: IPWithMask -> String