Iptables ERB

gistfile1.rb

    # Allowed ports
    <% if has_variable?("open_ports") then %>
        <% open_ports.each do |port| -%>
    iptables -t filter -A INPUT -p tcp --dport <%= port %> -j ACCEPT
        <% end -%>
    <% end %>

    <% if has_variable?("open_ports_from") then %>
        <% open_ports_from.each_pair do |port, host| -%>
    iptables -t filter -A INPUT -p tcp --dport <%= port %> -s <%= host %> -j ACCEPT
        <% end -%>
    <% end %>