merge munin_ip v4 and v6 into one rule

diff --git a/modules/ferm/templates/interfaces.conf.erb b/modules/ferm/templates/interfaces.conf.erb
index c504725..f017050 100644 (file)
--- a/modules/ferm/templates/interfaces.conf.erb
+++ b/modules/ferm/templates/interfaces.conf.erb
@@ -5,7 +5,7 @@ rescue
        ''
 end
 %>);
-def $MUNIN6_IPS = (<%=
+def $MUNIN_IPS = ($MUNIN_IPS <%=
 begin
        scope.lookupvar('site::nodeinfo')['misc']['v6addrs'].join(' ')
 rescue
@@ -13,26 +13,5 @@ rescue
 end
 %>);
 
-domain ip {
-        chain INPUT {
-               daddr ($MUNIN_IPS) NOP;
-        }
-}
-
-domain ip {
-        chain OUTPUT {
-               saddr ($MUNIN_IPS) NOP;
-        }
-}
-
-domain ip6 {
-        chain INPUT {
-               daddr ($MUNIN6_IPS) NOP;
-        }
-}
-
-domain ip6 {
-        chain OUTPUT {
-               saddr ($MUNIN6_IPS) NOP;
-        }
-}
+domain (ip ip6) { chain INPUT  { daddr ($MUNIN_IPS) NOP; } }
+domain (ip ip6) { chain OUTPUT { saddr ($MUNIN_IPS) NOP; } }