From e5110e15de1f19f3dfbde98092e5f55cfceb986f Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Mon, 27 Jan 2014 23:00:55 +0100 Subject: [PATCH] backup access to franck and sibelius --- modules/ferm/manifests/per-host.pp | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index a398de467..a72b9121f 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -233,6 +233,16 @@ class ferm::per-host { description => 'Allow postgress access', rule => '&SERVICE_RANGE(tcp, 5433, ( 2001:41c8:1000:21::21:10/128 ))' } + + @ferm::rule { 'dsa-postgres-backup': + description => 'Allow postgress access', + rule => '&SERVICE_RANGE(tcp, 5433, ( 5.153.231.12/32 ))' + } + @ferm::rule { 'dsa-postgres-backup6': + domain => 'ip6', + description => 'Allow postgress access', + rule => '&SERVICE_RANGE(tcp, 5433, ( 2001:41c8:1000:21::21:12/128 ))' + } } bmdb1: { @ferm::rule { 'dsa-postgres-main': @@ -331,6 +341,17 @@ class ferm::per-host { rule => '&SERVICE_RANGE(tcp, 5432, ( 2001:41c8:1000:21::21:12/128 ))' } } + sibelius: { + @ferm::rule { 'dsa-postgres-backup': + description => 'Allow postgress access', + rule => '&SERVICE_RANGE(tcp, 5433, ( 5.153.231.12/32 ))' + } + @ferm::rule { 'dsa-postgres-backup6': + domain => 'ip6', + description => 'Allow postgress access', + rule => '&SERVICE_RANGE(tcp, 5433, ( 2001:41c8:1000:21::21:12/128 ))' + } + } default: {} } # vpn fu -- 2.20.1