projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
add masquerade rules for casulana virtual machines
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
manifests
/
per_host.pp
diff --git
a/modules/ferm/manifests/per_host.pp
b/modules/ferm/manifests/per_host.pp
index
e052c4a
..
2afa570
100644
(file)
--- a/
modules/ferm/manifests/per_host.pp
+++ b/
modules/ferm/manifests/per_host.pp
@@
-8,6
+8,14
@@
class ferm::per_host {
}
case $::hostname {
}
case $::hostname {
+ casulana: {
+ @ferm::rule { 'dsa-cloud-builds-nat':
+ description => 'masquerade br1 virtual machines',
+ table => 'nat',
+ chain => 'POSTROUTING',
+ rule => 'saddr 172.16.1.0/24 outerface bond0.21 MASQUERADE'
+ }
+ }
czerny,clementi: {
@ferm::rule { 'dsa-upsmon':
description => 'Allow upsmon access',
czerny,clementi: {
@ferm::rule { 'dsa-upsmon':
description => 'Allow upsmon access',