# include ferm
#
class ferm {
- # realize (i.e. enable) all @ferm::rule virtual resources
- Ferm::Rule <| |>
- Ferm::Conf <| |>
-
File { mode => '0400' }
package { 'ferm':
}
- $munin_ips = getfromhash($site::nodeinfo, 'misc', 'v4addrs')
+ $munin_ips = getfromhash($deprecated::nodeinfo, 'misc', 'v4addrs')
.map |$addr| { "ip_${addr}" }
munin::check { $munin_ips: script => 'ip_', }
- $munin6_ips = getfromhash($site::nodeinfo, 'misc', 'v6addrs')
+ $munin6_ips = getfromhash($deprecated::nodeinfo, 'misc', 'v6addrs')
.map |$addr| { "ip_${addr}" }
munin::ipv6check { $munin6_ips: }
content => template('ferm/conf.d-munin-interfaces.conf.erb'),
notify => Exec['ferm reload'],
}
- @ferm::rule { 'dsa-munin-interfaces-in':
+ ferm::rule { 'dsa-munin-interfaces-in':
prio => '001',
description => 'munin accounting',
chain => 'INPUT',
domain => '(ip ip6)',
rule => 'daddr ($MUNIN_IPS) NOP'
}
- @ferm::rule { 'dsa-munin-interfaces-out':
+ ferm::rule { 'dsa-munin-interfaces-out':
prio => '001',
description => 'munin accounting',
chain => 'OUTPUT',