nm.d.o no longer needs access to projectb on bmdb1
[mirror/dsa-puppet.git] / modules / roles / manifests / loghost.pp
1 class roles::loghost {
2         include syslog_ng::loghost
3
4         ferm::rule { 'dsa-syslog':
5                 domain          => '(ip ip6)',
6                 description     => 'Allow syslog access',
7                 rule            => '&SERVICE_RANGE(tcp, 5140, $HOST_DEBIAN)'
8         }
9         ferm::rule { 'fastly-syslog':
10                 description     => 'Allow syslog access',
11                 rule            => '&SERVICE_RANGE(tcp, 5141, $HOST_FASTLY)'
12         }
13 }