puppet-windows_firewall icon indicating copy to clipboard operation
puppet-windows_firewall copied to clipboard

Published 20 hours ago • verified publisher icon voxpupuli

Puppet Modules should enforce a desired state

Open Romiko opened this issue 6 years ago • 5 comments

Preconditions. Firewall module used to set a few ports e.g. RDP, Web etc

If a user manually added a new port to the Firewall in Windows. This module has no functionality to remove rules that are not defined, which defeats the purpose of leveraging puppet.

A puppet module should allow you to configure a service and any manual changes to that service are deleted when the puppet agent runs.

I feel this module needs some important functionality to be enterprise grade.

  1. Purge firewall rules that are not defined in puppet
  2. Allow you to specify exceptions for Profile - Public, Private and Domain
  3. Keep Established connections during the puppet agent run

What are your thoughts on this?

Romiko avatar Jun 04 '18 05:06 Romiko