From: Martin Zobel-Helas <zobel@debian.org>
Date: Sat, 11 Dec 2010 15:43:52 +0000 (+0100)
Subject: allow postgres on danzi
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=884e450ddd6ffce6c6d0f978c742a551a98b5e6f;p=mirror%2Fdsa-puppet.git

allow postgres on danzi
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 72f8894ea..28250d030 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -24,6 +24,13 @@ class ferm::per-host {
                 rule         => "&SERVICE_RANGE(tcp, http-alt, ( 192.25.206.16 70.103.162.29 217.196.43.134 ))"
             }
         }
+	danzi: {
+            @ferm::rule { "dsa-postgres-danzi":
+                description     => "Allow postgress access",
+                rule            => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))"
+            }
+
+	}
         paganini: {
             @ferm::rule { "dsa-dhcp":
                 description     => "Allow dhcp access",