- @ferm::rule { 'dsa-ganeti-drbd-v4':
- description => 'allow ganeti drbd communication',
- rule => 'proto tcp mod state state (NEW) dport (11000:11999) @subchain \'ganeti-drbd\' { saddr ($HOST_GANETI_BACKEND_V4) daddr ($HOST_GANETI_BACKEND_V4) ACCEPT; }',
- notarule => true,
- }
-