From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 10 Jun 2013 13:26:06 +0000 (+0200)
Subject: make from-mgmt actually work
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=a894afad0aaf80473fb19cc1f06a58f46e40f2d9;p=mirror%2Fdsa-puppet.git

make from-mgmt actually work
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 3fe2d09ce..a50e8bd89 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -225,7 +225,7 @@ REJECT reject-with icmp-admin-prohibited
 	if $::hostname in [rautavaara] {
 		@ferm::rule { 'dsa-from-mgmt':
 			description     => 'Traffic routed from mgmt net vlan/bridge',
-			chain           => 'from-mgmt',
+			chain           => 'INPUT',
 			rule            => 'interface eth1 ACCEPT'
 		}
 		@ferm::rule { 'dsa-mgmt-mark':