A while ago i’ve asked this question. I use a template since and it works fine for me. I’m running 21 VM’s, and i need to add a firewall rule to 7 of them.
Now i’m back to my old question, how to add --set to -m recent. Is it possible to do? I prefer to keep one basic template for all servers. Or is it somehow possible to append iptables rules via another template?
Well, one idea is to make your iptables template parameterized with variables so you can insert additional rules to iptables based on variable values. Variables can then be defined per host or per group and have a value for 7 hosts but be empty for others. Since there are countless to ways organize and parameterize your iptables rules, you’ll have to figure out what combination works for you.