X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=b9ad487de7d0517edf43ea150f5bb7eaffec5e83;hb=a001db15a8463b3aac135b05343aca2ac7dc2aa9;hp=87aa56c87d859667218c84f79d3fb292525e7605;hpb=56939fcb1763e4ac9cb057a41c09e4c70f6378ba;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 87aa56c87..b9ad487de 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -503,6 +503,12 @@ REJECT reject-with icmp-admin-prohibited
 				rule            => 'outerface !tun+ mod mark mark 1 MASQUERADE',
 			}
 		}
+		ubc-enc2bl1,ubc-enc2bl2,ubc-enc2bl9,ubc-enc2bl10: {
+			@ferm::rule { 'dsa-luca-fixme':
+				description     => 'Allow ssh access from mnt and vpn networks',
+				rule            => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))',
+			}
+		}
 		default: {}
 	}
 	# tftp