X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fkeyring.pp;h=25ab9d308f04eb4c9ee43a6175eb2336b27a3807;hb=accfb8fd412b17c2b61f9ab1173aad720c8ffd61;hp=903064d5ccbd4c89f9ac20287eda01b1e6642332;hpb=d8b2fd955e29599ba70aca31c6fe725240242e8a;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/keyring.pp b/modules/roles/manifests/keyring.pp index 903064d5c..25ab9d308 100644 --- a/modules/roles/manifests/keyring.pp +++ b/modules/roles/manifests/keyring.pp @@ -14,7 +14,7 @@ class roles::keyring { $notify_address_bind = join(getfromhash($site::allnodeinfo, 'denis.debian.org', 'ipHostNumber'), "; ") - @ferm::rule { '01-dsa-bind': + ferm::rule { '01-dsa-bind': domain => '(ip ip6)', description => 'Allow nameserver access', rule => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_NAGIOS $HOST_DNSPRIMARY ) )',