}
case $::hostname {
- vittoria: {
- @ferm::rule { 'debconf17':
- description => 'temporarily allow DC17 access',
- rule => '&SERVICE_RANTE(tcp, 5432, (206.167.36.195/32))'
- }
- }
czerny,clementi: {
@ferm::rule { 'dsa-upsmon':
description => 'Allow upsmon access',
description => 'Allow syslog access',
rule => '&SERVICE_RANGE(tcp, 5140, $HOST_DEBIAN_V6)'
}
+ @ferm::rule { 'fastly-syslog':
+ description => 'Allow syslog access',
+ rule => '&SERVICE_RANGE(tcp, 5141, $HOST_FASTLY)'
+ }
}
kaufmann: {
@ferm::rule { 'dsa-hkp':
default: {}
}
- # elasticsearch stuff
- case $::hostname {
- stockhausen: {
- @ferm::rule { 'dsa-elasticsearch-bendel':
- domain => '(ip)',
- description => 'Allow elasticsearch access from bendel',
- rule => '&SERVICE_RANGE(tcp, 9200:9300, ( 82.195.75.100/32 ))'
- }
- @ferm::rule { 'dsa-elasticsearch-bendel6':
- domain => '(ip6)',
- description => 'Allow elasticsearch access from bendel',
- rule => '&SERVICE_RANGE(tcp, 9200:9300, ( 2001:41b8:202:deb:216:36ff:fe40:4002/128 ))'
- }
- }
- }
-
# postgres stuff
case $::hostname {
ullmann: {
rule => '&SERVICE_RANGE(tcp, 5439, ( 2001:1af8:4020:b030::/64 ))'
}
}
- melartin,vittoria: {
+ vittoria: {
@ferm::rule { 'dsa-postgres-backup':
description => 'Allow postgress access',
rule => '&SERVICE_RANGE(tcp, 5432, ( $HOST_PGBACKUPHOST_V4 ))'