and add a nop rule for munin

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/ferm/templates/interfaces.conf.erb b/modules/ferm/templates/interfaces.conf.erb
index 0b575d4..1bebce3 100644 (file)
--- a/modules/ferm/templates/interfaces.conf.erb
+++ b/modules/ferm/templates/interfaces.conf.erb
@@ -1,9 +1,13 @@
-def $MUNIN_IFS = (<%=
-ifs = []
-interfaces.split(',').each do |iface|
-  next unless Kernel.global_variables.include?("ipaddress_" + iface)
-  ifs << iface
-end
-ifs.join(' ')
-%>);
+def $MUNIN_IPS = (<%= v4ips.split(',').join(' ') %>);
 
+domain ip {
+        chain INPUT {
+               daddr ($MUNIN_IP) NOP;
+        }
+}
+
+domain ip {
+        chain OUTPUT {
+               saddr ($MUNIN_IP) NOP;
+        }
+}