X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=b9ad487de7d0517edf43ea150f5bb7eaffec5e83;hb=f817330b3e3c0eb060f5f5bcb0209662a2531ddb;hp=c5429a2e53c6792501c373073a79e31e621d1e9a;hpb=62632882bea7a8334ca6bfa6e0ff7f0300dc9e1b;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index c5429a2e5..b9ad487de 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -503,9 +503,9 @@ REJECT reject-with icmp-admin-prohibited rule => 'outerface !tun+ mod mark mark 1 MASQUERADE', } } - ubc-enc2bl1: { + ubc-enc2bl1,ubc-enc2bl2,ubc-enc2bl9,ubc-enc2bl10: { @ferm::rule { 'dsa-luca-fixme': - description => 'Allow ssh access from manlan', + description => 'Allow ssh access from mnt and vpn networks', rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))', } }