gistfile1.txt

# Create empty file
/etc/shorewall/rules:
  file.managed:
    - user: root
    - group: root
    - mode: 644
    - template: jinja
    - source: salt://shorewall/rules.jinja2
    - replace: False

# Add managed rules block
/etc/shorewall/rules-block:
  file.blockreplace:
    - name: /etc/shorewall/rules
    - marker_start: "### START SALT MANAGED SECTION ###"
    - marker_end: "### END SALT MANAGED SECTION ###"
    - append_if_not_found: True

/etc/shorewall/rules-block-allow-ssh:
  file.accumulated:
    - filename: /etc/shorewall/rules
    - name: rules-block-accumulator
    - text: |
        ?COMMENT Allow SSH traffic in at a rate of 3 per min
        SSH(ACCEPT)                     net                     fw                              -               -                       -                       -                       s:ssh:3/min:5
    - require_in:
      - file: /etc/shorewall/rules-block

/etc/shorewall/rules-block-allow-ping:
  file.accumulated:
    - filename: /etc/shorewall/rules
    - name: rules-block-accumulator
    - text: |
        ?COMMENT Allow Ping traffic
        Ping(ACCEPT)            net                     fw
    - require_in:
      - file: /etc/shorewall/rules-block