mirror of
https://github.com/thegeeklab/ansible-later.git
synced 2024-11-16 10:00:39 +00:00
65 lines
2.0 KiB
PowerShell
65 lines
2.0 KiB
PowerShell
|
#!powershell
|
||
|
|
|
||
|
|
# Copyright: (c) 2017, Michael Eaton <meaton@iforium.com>
|
||
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
||
|
|
|
||
|
|
#Requires -Module Ansible.ModuleUtils.Legacy
|
||
|
|
|
||
|
|
$ErrorActionPreference = "Stop"
|
||
|
|
$firewall_profiles = @('Domain', 'Private', 'Public')
|
||
|
|
|
||
|
|
$params = Parse-Args $args -supports_check_mode $true
|
||
|
|
$check_mode = Get-AnsibleParam -obj $params -name "_ansible_check_mode" -type "bool" -default $false
|
||
|
|
|
||
|
|
$profiles = Get-AnsibleParam -obj $params -name "profiles" -type "list" -default @("Domain", "Private", "Public")
|
||
|
|
$state = Get-AnsibleParam -obj $params -name "state" -type "str" -failifempty $true -validateset 'disabled','enabled'
|
||
|
|
|
||
|
|
$result = @{
|
||
|
|
changed = $false
|
||
|
|
profiles = $profiles
|
||
|
|
state = $state
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($PSVersionTable.PSVersion -lt [Version]"5.0") {
|
||
|
|
Fail-Json $result "win_firewall requires Windows Management Framework 5 or higher."
|
||
|
|
}
|
||
|
|
|
||
|
|
Try {
|
||
|
|
|
||
|
|
ForEach ($profile in $firewall_profiles) {
|
||
|
|
|
||
|
|
$currentstate = (Get-NetFirewallProfile -Name $profile).Enabled
|
||
|
|
$result.$profile = @{
|
||
|
|
enabled = ($currentstate -eq 1)
|
||
|
|
considered = ($profiles -contains $profile)
|
||
|
|
currentstate = $currentstate
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($profiles -notcontains $profile) {
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($state -eq 'enabled') {
|
||
|
|
|
||
|
|
if ($currentstate -eq $false) {
|
||
|
|
Set-NetFirewallProfile -name $profile -Enabled true -WhatIf:$check_mode
|
||
|
|
$result.changed = $true
|
||
|
|
$result.$profile.enabled = $true
|
||
|
|
}
|
||
|
|
|
||
|
|
} else {
|
||
|
|
|
||
|
|
if ($currentstate -eq $true) {
|
||
|
|
Set-NetFirewallProfile -name $profile -Enabled false -WhatIf:$check_mode
|
||
|
|
$result.changed = $true
|
||
|
|
$result.$profile.enabled = $false
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} Catch {
|
||
|
|
Fail-Json $result "an error occurred when attempting to change firewall status for profile $profile $($_.Exception.Message)"
|
||
|
|
}
|
||
|
|
|
||
|
|
Exit-Json $result
|