X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fbacula%2Fmanifests%2Fstorage.pp;h=f0a09df7a84b509b8a693e0df1e123ed476cf773;hb=ad0146116b09345295d16060416a48f80ee68ebe;hp=d4f67d01509adcbd7f11b08f15d111d70bc96ed2;hpb=7106d683b54e8c7d5ba645ee1501f3f468d9566e;p=mirror%2Fdsa-puppet.git

diff --git a/modules/bacula/manifests/storage.pp b/modules/bacula/manifests/storage.pp
index d4f67d015..f0a09df7a 100644
--- a/modules/bacula/manifests/storage.pp
+++ b/modules/bacula/manifests/storage.pp
@@ -29,13 +29,14 @@ class bacula::storage inherits bacula {
   @ferm::rule { 'dsa-bacula-sd-v4':
     domain      => '(ip)',
     description => 'Allow bacula-sd access from director and clients',
-
-    rule            => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }',
+    rule         => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }',
+    notarule        => true,
   }
+
   @ferm::rule { 'dsa-bacula-sd-v6':
     domain      => '(ip6)',
     description => 'Allow bacula-sd access from director and clients',
-
-    rule            => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }',
-
+    rule         => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }',
+    notarule        => true,
+  }
 }