bacula-ferm: we do not need to explicitly allow connections from localhost
authorPeter Palfrader <peter@palfrader.org>
Fri, 3 Aug 2018 07:56:39 +0000 (09:56 +0200)
committerPeter Palfrader <peter@palfrader.org>
Fri, 3 Aug 2018 07:56:39 +0000 (09:56 +0200)
modules/bacula/manifests/director.pp

index c5f6f28..86c903d 100644 (file)
@@ -42,12 +42,6 @@ class bacula::director inherits bacula {
                notify  => Exec['bacula-director reload']
        }
 
-       @ferm::rule { 'dsa-bacula-dir':
-               domain      => '(ip)',
-               description => 'Allow bacula access from localhost',
-               rule        => "proto tcp mod state state (NEW) dport (bacula-dir) saddr (${bacula_director_ip} localhost) ACCEPT",
-       }
-
        file { '/etc/bacula/conf.d/empty.conf':
                content => '',
                mode    => '0440',