X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fftp_conntrack.pp;h=ce84e98a33ac168d057a5ec530ca3266ef22d87d;hb=421d51cedb758b5a27a89b5c458562f9c279cbc3;hp=d64d40956c3f918676c69f5330a5473bc5759da1;hpb=2ca340df04500fd2887bf401502e8b3d17598e35;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/ftp_conntrack.pp b/modules/ferm/manifests/ftp_conntrack.pp index d64d40956..ce84e98a3 100644 --- a/modules/ferm/manifests/ftp_conntrack.pp +++ b/modules/ferm/manifests/ftp_conntrack.pp @@ -1,19 +1,19 @@ class ferm::ftp_conntrack { - # Allow non-passive connections to an FTP server - ferm::rule { 'dsa-ftp-conntrack-client': - domain => '(ip ip6)', - description => 'ftp client connection tracking', - table => 'raw', - chain => 'OUTPUT', - rule => 'proto tcp dport 21 CT helper ftp' - } + # Allow non-passive connections to an FTP server + ferm::rule { 'dsa-ftp-conntrack-client': + domain => '(ip ip6)', + description => 'ftp client connection tracking', + table => 'raw', + chain => 'OUTPUT', + rule => 'proto tcp dport 21 CT helper ftp' + } - # Allow passive connections from an FTP client - ferm::rule { 'dsa-ftp-conntrack-server': - domain => '(ip ip6)', - description => 'ftp server connection tracking', - table => 'raw', - chain => 'PREROUTING', - rule => 'proto tcp dport 21 CT helper ftp' - } + # Allow passive connections from an FTP client + ferm::rule { 'dsa-ftp-conntrack-server': + domain => '(ip ip6)', + description => 'ftp server connection tracking', + table => 'raw', + chain => 'PREROUTING', + rule => 'proto tcp dport 21 CT helper ftp' + } }