From 3a01610f81254c8f4754591ec8fc259cc89237d8 Mon Sep 17 00:00:00 2001
From: Tollef Fog Heen <tfheen@err.no>
Date: Sat, 16 Jun 2012 13:01:16 +0200
Subject: [PATCH] Allow traffic from bacula-director to fd

---
 modules/bacula/manifests/client.pp | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/bacula/manifests/client.pp b/modules/bacula/manifests/client.pp
index 4ab2b5930..4cbe24c8c 100644
--- a/modules/bacula/manifests/client.pp
+++ b/modules/bacula/manifests/client.pp
@@ -29,4 +29,10 @@ class bacula::client inherits bacula {
       path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
       refreshonly => true;
   }
+
+  @ferm::rule { 'dsa-bacula-fd':
+    domain      => '(ip ip6)',
+    description => 'Allow bacula access from storage and director',
+    rule        => 'proto tcp mod state state (NEW) dport (bacula-fd) @subchain \'bacula\' { saddr ($bacula_director_address) ACCEPT; }',
+  }
 }
-- 
2.20.1