X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=781a4a16b12055c81ff4e4ff4c4bb148a1c47bcf;hb=29cbe59430d1e7d7d5575579b48513c56227e2f7;hp=196a39e9187133dd4c8e3aa19930ccb0b5faa220;hpb=2c50e8598c18a622f9bc638a404416b48ac92711;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index 196a39e91..781a4a16b 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -7,10 +7,6 @@ # include ferm # class ferm { - # realize (i.e. enable) all @ferm::rule virtual resources - Ferm::Rule <| |> - Ferm::Conf <| |> - File { mode => '0400' } package { 'ferm': @@ -93,14 +89,14 @@ class ferm { content => template('ferm/conf.d-munin-interfaces.conf.erb'), notify => Exec['ferm reload'], } - @ferm::rule { 'dsa-munin-interfaces-in': + ferm::rule { 'dsa-munin-interfaces-in': prio => '001', description => 'munin accounting', chain => 'INPUT', domain => '(ip ip6)', rule => 'daddr ($MUNIN_IPS) NOP' } - @ferm::rule { 'dsa-munin-interfaces-out': + ferm::rule { 'dsa-munin-interfaces-out': prio => '001', description => 'munin accounting', chain => 'OUTPUT',