chef/site-cookbooks/kosmos-base/recipes/firewall.rb

#
# Cookbook Name:: kosmos-base
# Recipe:: firewall
#

# enable default firewall
firewall 'default'

firewall_rule 'ssh' do
  port     22
  protocol :tcp
  command  :allow
end

firewall_rule 'mosh' do
  port     60000..61000
  protocol :udp
  command  :allow
end