case $::hostname {
casulana: {
- @ferm::rule { 'dsa-cloud-builds':
- description => 'cloud-builds access',
- table => 'filter',
- chain => 'INPUT',
- rule => 'interface br0 ACCEPT'
+ @ferm::rule { 'dsa-cloud-builds-nat':
+ description => 'masquerade br1 virtual machines',
+ table => 'nat',
+ chain => 'POSTROUTING',
+ rule => 'saddr 172.16.1.0/24 outerface bond0.21 MASQUERADE'
}
}
czerny,clementi: {