merge munin_ip v4 and v6 into one rule
[mirror/dsa-puppet.git] / modules / ferm / templates / interfaces.conf.erb
1 def $MUNIN_IPS = (<%=
2 begin
3         scope.lookupvar('site::nodeinfo')['misc']['v4addrs'].join(' ')
4 rescue
5         ''
6 end
7 %>);
8 def $MUNIN_IPS = ($MUNIN_IPS <%=
9 begin
10         scope.lookupvar('site::nodeinfo')['misc']['v6addrs'].join(' ')
11 rescue
12         ''
13 end
14 %>);
15
16 domain (ip ip6) { chain INPUT  { daddr ($MUNIN_IPS) NOP; } }
17 domain (ip ip6) { chain OUTPUT { saddr ($MUNIN_IPS) NOP; } }