im trying to keep things as simple as possible without suing some crazy config management system that takes to long to learn. With that said, I use an iptables manager on my servers called CSF. I have he main forcing part taken care of, but I want to be able to manage its csf.allow config file that has an entry on each line. I would like to be able to add a value or multiple values to the different classes manifests to help me dynamically create those different entries and also have them remove the entries if a class is no longer applied to that host. Do I need to create another independent class that I assign to the host that somehow reads all the rest of the classes csf entries and then creates the final config file? If this is the simplest route, how should I go about doing this?
anyone have any ideas?