From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 13 Jul 2014 19:51:47 +0000 (+0200)
Subject: ipv6 fw updates for lw
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=387643a46bd53633c2a6295d94a1ab86602886c8;p=mirror%2Fdsa-puppet.git

ipv6 fw updates for lw
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index b96c021fa..7f2139ac3 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -423,19 +423,13 @@ class ferm::per-host {
 			}
 			@ferm::rule { 'dsa-postgres-replication':
 				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5433, ( 185.17.185.180/32 185.17.185.187/32 ))'
-			}
-		}
-		lw04: {
-			@ferm::rule { 'dsa-postgres-snapshot':
-				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.181/32 185.17.185.182/32 ))'
+				rule            => '&SERVICE_RANGE(tcp, 5433, ( 185.17.185.187/32 2001:1af8:4020:b030:deb::187/128 ))'
 			}
 		}
 		lw07: {
 			@ferm::rule { 'dsa-postgres-snapshot':
 				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.176/28 ))'
+				rule            => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.176/28 2001:1af8:4020:b030::/64 ))'
 			}
 		}
 		default: {}