a few powell specific rules
authorStephen Gran <steve@lobefin.net>
Wed, 12 May 2010 17:47:06 +0000 (18:47 +0100)
committerStephen Gran <steve@lobefin.net>
Wed, 12 May 2010 17:47:06 +0000 (18:47 +0100)
Signed-off-by: Stephen Gran <steve@lobefin.net>
manifests/site.pp

index 00b1f91..84bccf1 100644 (file)
@@ -146,6 +146,16 @@ node default {
                    rule            => "&SERVICE_RANGE(tcp, 8140, \$HOST_DEBIAN_V6)"
           }
         }
+       powell: {
+          @ferm::rule { "dsa-powell-v6-tunnel":
+                   description     => "Allow powell to use V6 tunnel broker",
+                   rule            => "proto ipv6 saddr 212.227.117.6 jump ACCEPT"
+          }
+          @ferm::rule { "dsa-powell-btseed":
+                   description     => "Allow powell to seed BT",
+                   rule            => "proto tcp dport 8000:8100 jump ACCEPT"
+          }
+       }
        beethoven: {
           @ferm::rule { "dsa-merikanto-beethoven":
                    description     => "Allow merikanto",  # for nfs, and that uses all kind of ports by default.