X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper_host.pp;h=2afa57050e8b3644925cc34b79633f7859e5b27f;hb=b8d2184f3c059eb20f7e1a6f30e4f9af75861f6a;hp=78aef63a66365338ea8c91d1814912d8e508e91b;hpb=031fd72db0cbbff758a49d0722ed87aac2905efb;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp
index 78aef63a6..2afa57050 100644
--- a/modules/ferm/manifests/per_host.pp
+++ b/modules/ferm/manifests/per_host.pp
@@ -9,11 +9,11 @@ class ferm::per_host {
 
 	case $::hostname {
 		casulana: {
-			@ferm::rule { 'dsa-cloud-builds':
-				description     => 'cloud-builds access',
-				table           => 'filter',
-				chain           => 'INPUT',
-				rule            => 'interface br0 ACCEPT'
+			@ferm::rule { 'dsa-cloud-builds-nat':
+				description     => 'masquerade br1 virtual machines',
+				table           => 'nat',
+				chain           => 'POSTROUTING',
+				rule            => 'saddr 172.16.1.0/24 outerface bond0.21 MASQUERADE'
 			}
 		}
 		czerny,clementi: {