X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=5591dbc4a16a584fb501de33dec402d0a696fd22;hb=1dcae3c99e63e204f5383fb30cbd532b7d09d89e;hp=a1715dc09fa63e18a60679b1e44d69bb9a936cba;hpb=bd99267c6cb1f4802806809562a9b1cfb31b882a;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index a1715dc09..5591dbc4a 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -19,9 +19,15 @@ class ferm::per-host { } } danzi: { - @ferm::rule { "dsa-postgres-danzi": - description => "Allow postgress access", - rule => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))" + @ferm::rule { + "dsa-postgres-danzi": + description => "Allow postgress access", + rule => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))" + ; + "dsa-postgres2-danzi": + description => "Allow postgress access2", + rule => "&SERVICE_RANGE(tcp, 5437, ( 206.12.19.0/24 ))" + ; } } @@ -81,7 +87,14 @@ class ferm::per-host { rule => "&SERVICE(tcp, 11371)" } } - liszt: { + gombert: { + @ferm::rule { "dsa-infinoted": + domain => "(ip ip6)", + description => "Allow infinoted access", + rule => "&SERVICE(tcp, 6523)" + } + } + bendel,liszt: { @ferm::rule { "smtp": domain => "(ip ip6)", description => "Allow smtp access",