Support for Advanced Policy Firewall (APF)

salt.modules.apf.allow(ip, port=None)

Add host (IP/FQDN) to allow_hosts.rules and immediately load new rule into firewall CLI Example:

salt '*' apf.allow 127.0.0.1

salt.modules.apf.deny(ip)

Add host (IP/FQDN) to deny_hosts.rules and immediately load new rule into firewall CLI Example:

salt '*' apf.deny 1.2.3.4

salt.modules.apf.disable()

Stop (flush) all firewall rules CLI Example:

salt '*' apf.disable

salt.modules.apf.enable()

Load all firewall rules CLI Example:

salt '*' apf.enable

salt.modules.apf.refresh()

Refresh & resolve dns names in trust rules CLI Example:

salt '*' apf.refresh

salt.modules.apf.reload()

Stop (flush) & reload firewall rules CLI Example:

salt '*' apf.reload

salt.modules.apf.remove(ip)

Remove host from [glob]*_hosts.rules and immediately remove rule from firewall CLI Example:

salt '*' apf.remove 1.2.3.4

salt.modules.apf.running()

Check apf status CLI Example:

salt '*' apf.running