X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fmunin%2Fmanifests%2Finit.pp;h=ee50bd0a3109ba2dcda57f4b48e5d1fa0f3803ad;hb=fc12446d1c57ce8ffc3546f9a58c8e6f9cca404a;hp=b45d6646c00f6c5b717bde0a334cbc245f98ceed;hpb=915625a55b11c90b5fea3c4c37cf7d5992d13793;p=mirror%2Fdsa-puppet.git diff --git a/modules/munin/manifests/init.pp b/modules/munin/manifests/init.pp index b45d6646c..ee50bd0a3 100644 --- a/modules/munin/manifests/init.pp +++ b/modules/munin/manifests/init.pp @@ -30,14 +30,14 @@ class munin { @ferm::rule { 'dsa-munin-v4': description => 'Allow munin from munin master', - rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr (\$HOST_MUNIN_V4 \$HOST_NAGIOS_V4) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V4 $HOST_NAGIOS_V4) ACCEPT; }', notarule => true, } @ferm::rule { 'dsa-munin-v6': description => 'Allow munin from munin master', domain => 'ip6', - rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr (\$HOST_MUNIN_V6 \$HOST_NAGIOS_V6) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V6 $HOST_NAGIOS_V6) ACCEPT; }', notarule => true, } }