X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=b9ad487de7d0517edf43ea150f5bb7eaffec5e83;hb=a001db15a8463b3aac135b05343aca2ac7dc2aa9;hp=c5429a2e53c6792501c373073a79e31e621d1e9a;hpb=b9cee5758f429c8be1d03ea935c4336c91df75b5;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index c5429a2e5..b9ad487de 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -503,9 +503,9 @@ REJECT reject-with icmp-admin-prohibited rule => 'outerface !tun+ mod mark mark 1 MASQUERADE', } } - ubc-enc2bl1: { + ubc-enc2bl1,ubc-enc2bl2,ubc-enc2bl9,ubc-enc2bl10: { @ferm::rule { 'dsa-luca-fixme': - description => 'Allow ssh access from manlan', + description => 'Allow ssh access from mnt and vpn networks', rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))', } }