From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 10 Sep 2010 11:15:56 +0000 (+0200)
Subject: kerberos kadmind access from draghi
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=afc0cb35a6a15289c5ec240361fdff66d81a822a;p=mirror%2Fdsa-puppet.git

kerberos kadmind access from draghi
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 193d701c3..c7e6479a1 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -153,6 +153,16 @@ class ferm::per-host {
                 description  => "kerberos KDC",
                 rule         => "&SERVICE(udp, kpasswd)",
             }
+            @ferm::rule { "dsa-krb-kadmind":
+                domain          => "(ip ip6)",
+                description  => "kerberos kadmind access from draghi",
+                rule         => "&SERVICE_RANGE(tcp, kerberos-adm, 82.195.75.106)",
+            }
+            @ferm::rule { "dsa-krb-kadmind-v6":
+                domain          => "(ip ip6)",
+                description  => "kerberos kadmind access from draghi",
+                rule         => "&SERVICE_RANGE(tcp, kerberos-adm, 2001:41b8:202:deb:216:36ff:fe40:3906)",
+            }
         }
     }