gistfile1.txt

package :iptables, :provides => :firewall do
  description 'Configure IPTables Firewall'

  # Need to run some commands, don't see how to do this unless I hook into a package install
  # So, faking a push_text
  push_text '', '/dev/null' do
    #
    # Allow SSH connections on tcp port 22
    #

    post :install, '/sbin/iptables -A INPUT -p tcp --dport 22 -j ACCEPT'
    
    #
    # Save settings
    #
    
    post :install, '/sbin/service iptables save'
  end
end