Try some nat/redirect magic on sibelius
authorPeter Palfrader <peter@palfrader.org>
Fri, 13 Aug 2010 20:27:03 +0000 (22:27 +0200)
committerPeter Palfrader <peter@palfrader.org>
Fri, 13 Aug 2010 20:27:03 +0000 (22:27 +0200)
modules/ferm/manifests/per-host.pp

index 3e07aec..a4ab0d9 100644 (file)
@@ -195,6 +195,20 @@ class ferm::per-host {
             }
         }
     }
+
+    # redirect snapshot into varnish
+    case $hostname {
+        sibelius: {
+            @ferm::rule { "dsa-snapshot-varnish":
+                rule            => '&SERVICE(tcp, 11371)'
+            }
+            @ferm::rule { "dsa-snapshot-varnish":
+                table           => 'nat'
+                chain           => 'PREROUTING'
+                rule            => 'proto tcp daddr 193.62.202.28 dport 80 REDIRECT to-ports 6081'
+            }
+        }
+    }
 }
 
 # vim:set et: