From 7106d683b54e8c7d5ba645ee1501f3f468d9566e Mon Sep 17 00:00:00 2001 From: Tollef Fog Heen Date: Sat, 16 Jun 2012 17:08:17 +0200 Subject: [PATCH] Allow all debian hosts access to the bacula storage --- modules/bacula/manifests/storage.pp | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/modules/bacula/manifests/storage.pp b/modules/bacula/manifests/storage.pp index 5ed32b90a..d4f67d015 100644 --- a/modules/bacula/manifests/storage.pp +++ b/modules/bacula/manifests/storage.pp @@ -25,4 +25,17 @@ class bacula::storage inherits bacula { path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", refreshonly => true; } + + @ferm::rule { 'dsa-bacula-sd-v4': + domain => '(ip)', + description => 'Allow bacula-sd access from director and clients', + + rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V4) ACCEPT; }', + } + @ferm::rule { 'dsa-bacula-sd-v6': + domain => '(ip6)', + description => 'Allow bacula-sd access from director and clients', + + rule => 'proto tcp mod state state (NEW) dport (bacula-sd) @subchain \'bacula-sd\' { saddr ($HOST_DEBIAN_V6) ACCEPT; }', + } -- 2.20.1