allow paganini to serve dhcp and tftp

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 2d6c5bd..14c6990 100644 (file)
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -31,6 +31,16 @@ class ferm::per-host {
            }
         }
 
+        paganini: {
+           @ferm::rule { "dsa-dhcp":
+                   description     => "Allow dhcp access",
+                   rule            => "&SERVICE(udp, 67)"
+          }
+           @ferm::rule { "dsa-tftp":
+                   description     => "Allow tftp access",
+                   rule            => "&SERVICE(udp, 69)"
+          }
+        }
         handel: {
           @ferm::rule { "dsa-puppet":
                    description     => "Allow puppet access",