[chef] Re: Experiences managing iptables

[Jon Wood < >]

On 21 July 2010 15:57, Jacobo García 
<
 >
 wrote:
> Apart from using opscode/37signals iptables cookbook, is there any
> other experience of managing iptables with chef?

I implemented a cookbook using node attributes to define firewall
rules at one point, but ended up not using it because it seemed to
overcomplicate matters for the infrastructure I eventually settled on.

It did work quite well for an environment where all traffic is routed
through a single machine and NATed though, allow nodes to specify the
ports and IP addresses they wanted forwarded to them.