X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fstatic_base.pp;h=bade119d207d871653b18cb5409647553106ba1f;hb=29cbe59430d1e7d7d5575579b48513c56227e2f7;hp=fa756d692abdd30d677e50b6bfbdd5f346b258b3;hpb=2c50e8598c18a622f9bc638a404416b48ac92711;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/static_base.pp b/modules/roles/manifests/static_base.pp index fa756d692..bade119d2 100644 --- a/modules/roles/manifests/static_base.pp +++ b/modules/roles/manifests/static_base.pp @@ -27,12 +27,12 @@ class roles::static_base { file { '/usr/local/bin/static-mirror-ssh-wrap': ensure => absent; } file { '/usr/local/bin/static-master-ssh-wrap': ensure => absent; } - @ferm::rule { 'dsa-static-bt-v4': + ferm::rule { 'dsa-static-bt-v4': description => 'Allow bt between static hosts', rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881:6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V4) ACCEPT; }', notarule => true, } - @ferm::rule { 'dsa-static-bt-v6': + ferm::rule { 'dsa-static-bt-v6': description => 'Allow bt between static hosts', domain => 'ip6', rule => 'proto tcp mod state state (NEW) mod multiport destination-ports (6881:6999) @subchain \'static-bt\' { saddr ($HOST_STATIC_V6) ACCEPT; }',