From: Tollef Fog Heen <tfheen@err.no>
Date: Sat, 16 Jun 2012 15:08:17 +0000 (+0200)
Subject: Allow all debian hosts access to the bacula storage
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=7106d683b54e8c7d5ba645ee1501f3f468d9566e;p=mirror%2Fdsa-puppet.git

Allow all debian hosts access to the bacula storage
---

diff --git a/modules/bacula/manifests/storage.pp b/modules/bacula/manifests/storage.pp
index 5ed32b90a..d4f67d015 100644
--- a/modules/bacula/manifests/storage.pp
+++ b/modules/bacula/manifests/storage.pp
@@ -25,4 +25,17 @@ class bacula::storage inherits bacula {
       path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
       refreshonly => true;
   }
+
+  @ferm::rule { 'dsa-bacula-sd-v4':
+    domain      => '(ip)',
+    description => 'Allow bacula-sd access from director and clients',
+
+    rule            => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }',
+  }
+  @ferm::rule { 'dsa-bacula-sd-v6':
+    domain      => '(ip6)',
+    description => 'Allow bacula-sd access from director and clients',
+
+    rule            => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }',
+
 }