From 12c125eacc345b91fb22182272665cf22f00f5e7 Mon Sep 17 00:00:00 2001
From: Stephen Gran <steve@lobefin.net>
Date: Sat, 20 Feb 2010 21:45:36 +0000
Subject: [PATCH] a few more rules

Signed-off-by: Stephen Gran <steve@lobefin.net>
---
 modules/apache2/manifests/init.pp | 4 ++++
 modules/exim/manifests/init.pp    | 4 ++++
 modules/named/manifests/init.pp   | 4 ++++
 modules/ntp/manifests/init.pp     | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/modules/apache2/manifests/init.pp b/modules/apache2/manifests/init.pp
index fc2de44f5..9975b5460 100644
--- a/modules/apache2/manifests/init.pp
+++ b/modules/apache2/manifests/init.pp
@@ -129,4 +129,8 @@ class apache2 {
                command => "/etc/init.d/apache2 force-reload",
                refreshonly => true,
 	}
+        ferm::rule { "dsa-apache":
+                description     => "Allow web access",
+                rule            => "proto tcp mod state state (NEW) dport (80) ACCEPT"
+        }
 }
diff --git a/modules/exim/manifests/init.pp b/modules/exim/manifests/init.pp
index 43dd108df..f488918a3 100644
--- a/modules/exim/manifests/init.pp
+++ b/modules/exim/manifests/init.pp
@@ -156,4 +156,8 @@ class exim {
         path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
         refreshonly => true,
     }
+    ferm::rule { "dsa-exim":
+            description     => "Allow smtp access",
+            rule            => "proto tcp mod state state (NEW) dport (25) ACCEPT"
+    }
 }
diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp
index 5d2e250df..73c7cdcb3 100644
--- a/modules/named/manifests/init.pp
+++ b/modules/named/manifests/init.pp
@@ -25,6 +25,10 @@ class named {
                         mode    => 775,
                         ;
         }
+        ferm::rule { "dsa-bind":
+                description     => "Allow nameserver access",
+                rule            => "proto (udp tcp) mod state state (NEW) dport (53) ACCEPT"
+        }
 }
 
 # vim: set fdm=marker ts=8 sw=8 et:
diff --git a/modules/ntp/manifests/init.pp b/modules/ntp/manifests/init.pp
index f46173556..00b3340b8 100644
--- a/modules/ntp/manifests/init.pp
+++ b/modules/ntp/manifests/init.pp
@@ -25,4 +25,8 @@ class ntp {
 		path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
 		refreshonly => true,
 	}
+        ferm::rule { "dsa-ntp":
+                description     => "Allow ntp access",
+                rule            => "proto udp mod state state (NEW) dport (123) ACCEPT"
+        }
 }
-- 
2.20.1