From: Martin Zobel-Helas <zobel@debian.org>
Date: Fri, 12 Apr 2013 10:17:51 +0000 (+0200)
Subject: allow vrrp traffic
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=1785c32e6b26cd194b6f0b63e91f4c0c2cdb5e52;p=mirror%2Fdsa-puppet.git

allow vrrp traffic
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 3ab8f4ce5..953ea6504 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -296,4 +296,12 @@ REJECT reject-with icmp-admin-prohibited
 		}
 		default: {}
 	}
+	case $::hostname {
+		bm-bl1,bm-bl9: {
+			@ferm::rule { 'dsa-vrrp':
+				rule            => 'proto vrrp daddr 224.0.0.18 jump ACCEPT',
+			}
+		}
+		default: {}
+	}
 }