X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Froles%2Fmanifests%2Fstatic_base.pp;h=216c9bf9b57bc40fdb07b10294b15e5b1ef28756;hb=38c2df6dd66d57f3da2e972d73988f444dd62135;hp=ed1f55f2520f1997153525e6a532ab5976d162d2;hpb=02468c9711c0cf6297d6057f9ba5ed78af11be83;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/static_base.pp b/modules/roles/manifests/static_base.pp index ed1f55f25..216c9bf9b 100644 --- a/modules/roles/manifests/static_base.pp +++ b/modules/roles/manifests/static_base.pp @@ -23,13 +23,13 @@ class roles::static_base { @ferm::rule { 'dsa-static-bt-v4': description => 'Allow bt between static hosts', - rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881-6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V4) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881:6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V4) ACCEPT; }', notarule => true, } @ferm::rule { 'dsa-static-bt-v6': description => 'Allow bt between static hosts', domain => 'ip6', - rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881-6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V6) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881:6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V6) ACCEPT; }', notarule => true, } }