From 26f227a6a06f95049e18033c045261fb51d8c180 Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sat, 20 Feb 2010 20:44:18 +0000 Subject: [PATCH] a few more rules Signed-off-by: Stephen Gran --- modules/ferm/manifests/init.pp | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index 75b8f55d1..55f619e95 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -42,6 +42,14 @@ class ferm { domain => "ip6", rule => "proto tcp mod state state (NEW) dport (ssh) @subchain 'ssh' { saddr (\$SSH_V6_SOURCES) ACCEPT; }" } + ferm::rule { "dsa-munin": + description => "Allow munin from munin master", + rule => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN) ACCEPT; }" + } + ferm::rule { "dsa-nagios": + description => "Allow nrpe from nagios master", + rule => "proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS) ACCEPT; }" + } exec { "ferm restart": path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", -- 2.20.1