define sunet::server() { # Set up encrypted swap sunet::encrypted_swap { 'sunet_encrypted_swap': } # Add prerequisites for ethernet bonding, if physical server sunet::ethernet_bonding { 'sunet_ethernet_bonding': } # Ignore IPv6 multicast ufw::deny { 'ignore_v6_multicast': ip => 'ff02::1', proto => 'any' # 'ufw' has a hard-coded list of protocols, which does not include 'ipv6-icmp' :( } # Ignore IPv6 multicast PIM router talk ufw::deny { 'ignore_v6_multicast_PIM': ip => 'ff02::d', proto => 'any' # 'ufw' has a hard-coded list of protocols, which does not include 'ipv6-icmp' :( } }