X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Fmanifests%2Finit.pp;h=ee252e3c0ab97b79b9f91eb329a0f037dadd08a3;hb=a528037e14d02ad14a785c67063c30ccd47290f7;hp=a178271bc2922749391847a61e2d87e52e280cbd;hpb=89fb28ae8731fee3ed45b8642c6c9e3f96960e6a;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp index a178271bc..ee252e3c0 100644 --- a/modules/named/manifests/init.pp +++ b/modules/named/manifests/init.pp @@ -25,12 +25,12 @@ class named { @ferm::rule { '01-dsa-bind-4': domain => '(ip)', description => 'Allow nameserver access', - rule => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_DNS_SECONDARY_V4 $HOST_DNS_GEO_V4 $HOST_NAGIOS_V4 $HOST_RCODE0_V4 $HOST_EASYDNS_V4 ) )', + rule => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_DNS_GEO_V4 $HOST_NAGIOS_V4 $HOST_RCODE0_V4 $HOST_EASYDNS_V4 5.153.231.21 ) )', } @ferm::rule { '01-dsa-bind-6': domain => '(ip6)', description => 'Allow nameserver access', - rule => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_DNS_SECONDARY_V6 $HOST_DNS_GEO_V6 $HOST_NAGIOS_V6 $HOST_RCODE0_V6 ) )', + rule => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_DNS_GEO_V6 $HOST_NAGIOS_V6 $HOST_RCODE0_V6 2001:41c8:1000:21::21:21 ) )', } } else { @ferm::rule { '01-dsa-bind':