allow postgres on danzi

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 72f8894..28250d0 100644 (file)
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -24,6 +24,13 @@ class ferm::per-host {
                 rule         => "&SERVICE_RANGE(tcp, http-alt, ( 192.25.206.16 70.103.162.29 217.196.43.134 ))"
             }
         }
+       danzi: {
+            @ferm::rule { "dsa-postgres-danzi":
+                description     => "Allow postgress access",
+                rule            => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))"
+            }
+
+       }
         paganini: {
             @ferm::rule { "dsa-dhcp":
                 description     => "Allow dhcp access",