From: Stephen Gran <steve@lobefin.net>
Date: Mon, 2 Sep 2013 18:00:44 +0000 (+0100)
Subject: add more admin firewall access
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=32ff4f2ef22aeb8b187928ad7bf1ebe2d470e2ed;hp=c054c0c781339da62ddac6bc6090ada432e40845;p=mirror%2Fdsa-puppet.git

add more admin firewall access

Signed-off-by: Stephen Gran <steve@lobefin.net>
---

diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp
index 2aaad04f8..43f2c6f20 100644
--- a/modules/roles/manifests/pubsub.pp
+++ b/modules/roles/manifests/pubsub.pp
@@ -187,6 +187,17 @@ class roles::pubsub {
 		rule        => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V6)'
 	}
 
+	@ferm::rule { 'rabbitmq-adm':
+		description => 'rabbitmq connections',
+		rule        => '&SERVICE_RANGE(tcp, 5671, $DSA_IPS)'
+	}
+
+	@ferm::rule { 'rabbitmq-v6-adm':
+		domain      => 'ip6',
+		description => 'rabbitmq connections',
+		rule        => '&SERVICE_RANGE(tcp, 5671, $DSA_V6_IPS)'
+	}
+
 	if $::hostname == $cc_master {
 		$you = $cc_secondary
 	} else {