From 32ff4f2ef22aeb8b187928ad7bf1ebe2d470e2ed Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Mon, 2 Sep 2013 19:00:44 +0100 Subject: [PATCH] add more admin firewall access Signed-off-by: Stephen Gran --- modules/roles/manifests/pubsub.pp | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp index 2aaad04f8..43f2c6f20 100644 --- a/modules/roles/manifests/pubsub.pp +++ b/modules/roles/manifests/pubsub.pp @@ -187,6 +187,17 @@ class roles::pubsub { rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V6)' } + @ferm::rule { 'rabbitmq-adm': + description => 'rabbitmq connections', + rule => '&SERVICE_RANGE(tcp, 5671, $DSA_IPS)' + } + + @ferm::rule { 'rabbitmq-v6-adm': + domain => 'ip6', + description => 'rabbitmq connections', + rule => '&SERVICE_RANGE(tcp, 5671, $DSA_V6_IPS)' + } + if $::hostname == $cc_master { $you = $cc_secondary } else { -- 2.20.1