projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Prepare to move postgres to lw07
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
manifests
/
per-host.pp
diff --git
a/modules/ferm/manifests/per-host.pp
b/modules/ferm/manifests/per-host.pp
index
ef5e6a4
..
24a37b1
100644
(file)
--- a/
modules/ferm/manifests/per-host.pp
+++ b/
modules/ferm/manifests/per-host.pp
@@
-10,14
+10,6
@@
class ferm::per-host {
rule => '&SERVICE(tcp, 873)'
}
}
rule => '&SERVICE(tcp, 873)'
}
}
- case $::hostname {
- adayevskaya: {
- @ferm::rule { 'dsa-iscsi':
- description => 'Allow mfl (local admin) access',
- rule => '&SERVICE_RANGE(tcp, 22, ( 130.83.226.60/32 ))'
- }
- }
- }
case $::hostname {
bm-bl9: {
case $::hostname {
bm-bl9: {
@@
-430,6
+422,12
@@
class ferm::per-host {
rule => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.181/32 185.17.185.182/32 ))'
}
}
rule => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.181/32 185.17.185.182/32 ))'
}
}
+ lw07: {
+ @ferm::rule { 'dsa-postgres-snapshot':
+ description => 'Allow postgress access',
+ rule => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.176/28 ))'
+ }
+ }
default: {}
}
# vpn fu
default: {}
}
# vpn fu