X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=a4ab0d943d33c5620855c4555d485463db370742;hb=a97eb9eec4e89516f8958ad948adbc755f13aba0;hp=d515e37cfac52560c458b8a112104cd5375ca5d8;hpb=4f19efd8d7fa26f77d5ebbaee4b07838fac20da7;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index d515e37cf..a4ab0d943 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -108,6 +108,24 @@ class ferm::per-host {
                     rule            => "&SERVICE(tcp, 636)"
 	    }
         }
+	cilea: {
+            file {
+                "/etc/ferm/conf.d/load_sip_conntrack.conf":
+                    source => "puppet:///ferm/conntrack_sip.conf",
+                    require => Package["ferm"],
+                    notify  => Exec["ferm restart"];
+            }
+            @ferm::rule { "dsa-sip":
+                    domain          => "(ip ip6)",
+                    description     => "Allow sip access",
+                    rule            => "&TCP_UDP_SERVICE(5060)"
+            }
+            @ferm::rule { "dsa-sipx":
+                    domain          => "(ip ip6)",
+                    description     => "Allow sipx access",
+                    rule            => "&TCP_UDP_SERVICE(5080)"
+            }
+        }
     }
 
 
@@ -177,6 +195,20 @@ class ferm::per-host {
             }
         }
     }
+
+    # redirect snapshot into varnish
+    case $hostname {
+        sibelius: {
+            @ferm::rule { "dsa-snapshot-varnish":
+                rule            => '&SERVICE(tcp, 11371)'
+            }
+            @ferm::rule { "dsa-snapshot-varnish":
+                table           => 'nat'
+                chain           => 'PREROUTING'
+                rule            => 'proto tcp daddr 193.62.202.28 dport 80 REDIRECT to-ports 6081'
+            }
+        }
+    }
 }
 
 # vim:set et: