{"action":"created","issue":{"url":"https://api.github.com/repos/HubbleStack/Nova/issues/48","repository_url":"https://api.github.com/repos/HubbleStack/Nova","labels_url":"https://api.github.com/repos/HubbleStack/Nova/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/HubbleStack/Nova/issues/48/comments","events_url":"https://api.github.com/repos/HubbleStack/Nova/issues/48/events","html_url":"https://github.com/HubbleStack/Nova/issues/48","id":150610660,"number":48,"title":"firewall policy audit module (iptables.check)","user":{"login":"cedwards","id":534685,"avatar_url":"https://avatars.githubusercontent.com/u/534685?v=3","gravatar_id":"","url":"https://api.github.com/users/cedwards","html_url":"https://github.com/cedwards","followers_url":"https://api.github.com/users/cedwards/followers","following_url":"https://api.github.com/users/cedwards/following{/other_user}","gists_url":"https://api.github.com/users/cedwards/gists{/gist_id}","starred_url":"https://api.github.com/users/cedwards/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cedwards/subscriptions","organizations_url":"https://api.github.com/users/cedwards/orgs","repos_url":"https://api.github.com/users/cedwards/repos","events_url":"https://api.github.com/users/cedwards/events{/privacy}","received_events_url":"https://api.github.com/users/cedwards/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/HubbleStack/Nova/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":{"login":"avb76","id":13166266,"avatar_url":"https://avatars.githubusercontent.com/u/13166266?v=3","gravatar_id":"","url":"https://api.github.com/users/avb76","html_url":"https://github.com/avb76","followers_url":"https://api.github.com/users/avb76/followers","following_url":"https://api.github.com/users/avb76/following{/other_user}","gists_url":"https://api.github.com/users/avb76/gists{/gist_id}","starred_url":"https://api.github.com/users/avb76/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/avb76/subscriptions","organizations_url":"https://api.github.com/users/avb76/orgs","repos_url":"https://api.github.com/users/avb76/repos","events_url":"https://api.github.com/users/avb76/events{/privacy}","received_events_url":"https://api.github.com/users/avb76/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2016-04-24T00:40:04Z","updated_at":"2016-04-24T22:40:37Z","closed_at":null,"body":"We should put together a firewall policy module that will ensure that certain firewall rules are applied. Initial support for `iptables`; eventual support for `pf`. This module could leverage `iptables.check` execution module.\r\n\r\n```\r\nfirewall:\r\n  whitelist:\r\n\r\n    ssh:\r\n      data:\r\n        table: 'filter', \r\n        chain: None, \r\n        rule: '-p tcp --dport 22 -m state --state ESTABLISHED, RELATED -j ACCEPT' \r\n        family: 'ipv4'\r\n```"},"comment":{"url":"https://api.github.com/repos/HubbleStack/Nova/issues/comments/214055827","html_url":"https://github.com/HubbleStack/Nova/issues/48#issuecomment-214055827","issue_url":"https://api.github.com/repos/HubbleStack/Nova/issues/48","id":214055827,"user":{"login":"dgmorrisjr","id":12668108,"avatar_url":"https://avatars.githubusercontent.com/u/12668108?v=3","gravatar_id":"","url":"https://api.github.com/users/dgmorrisjr","html_url":"https://github.com/dgmorrisjr","followers_url":"https://api.github.com/users/dgmorrisjr/followers","following_url":"https://api.github.com/users/dgmorrisjr/following{/other_user}","gists_url":"https://api.github.com/users/dgmorrisjr/gists{/gist_id}","starred_url":"https://api.github.com/users/dgmorrisjr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dgmorrisjr/subscriptions","organizations_url":"https://api.github.com/users/dgmorrisjr/orgs","repos_url":"https://api.github.com/users/dgmorrisjr/repos","events_url":"https://api.github.com/users/dgmorrisjr/events{/privacy}","received_events_url":"https://api.github.com/users/dgmorrisjr/received_events","type":"User","site_admin":false},"created_at":"2016-04-24T22:40:36Z","updated_at":"2016-04-24T22:40:36Z","body":"Would it also be possible to add a check for a the default policy, maybe using `iptables.get_policy` to help ensure they are all set to DROP"}}