X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fnamed%2Fmanifests%2Finit.pp;h=719c0e7b4b18bdc4401a1df397b15d6480135256;hb=0908741048684a3f0d143144b82fab87095a42a6;hp=0c75aebf07dc854b9db0d59cbd04e2365a0ce38c;hpb=96f38cb57f542dd3d83e9b0b7bf201e3ec23f2d3;p=mirror%2Fdsa-puppet.git

diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp
index 0c75aebf0..719c0e7b4 100644
--- a/modules/named/manifests/init.pp
+++ b/modules/named/manifests/init.pp
@@ -17,6 +17,19 @@ class named {
                         refreshonly => true,
                         ;
         }
+        file {
+                "/var/log/bind9":
+                        ensure  => directory,
+                        owner   => bind,
+                        group   => bind,
+                        mode    => 775,
+                        ;
+        }
+        @ferm::rule { "dsa-bind":
+                domain          => "(ip ip6)",
+                description     => "Allow nameserver access",
+                rule            => "&TCP_UDP_SERVICE(53)"
+        }
 }
 
 # vim: set fdm=marker ts=8 sw=8 et: