projects
/
mirror
/
dsa-puppet.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
8674e02
)
allow ssh access to ubc-node-arm* from ubc-bulwark (internal)
author
Luca Filipozzi
<luca.filipozzi@gmail.com>
Sun, 9 Jun 2019 20:34:39 +0000
(13:34 -0700)
committer
Luca Filipozzi
<luca.filipozzi@gmail.com>
Sun, 9 Jun 2019 20:34:39 +0000
(13:34 -0700)
modules/ferm/manifests/per_host.pp
patch
|
blob
|
history
diff --git
a/modules/ferm/manifests/per_host.pp
b/modules/ferm/manifests/per_host.pp
index
2bc1944
..
7e650f8
100644
(file)
--- a/
modules/ferm/manifests/per_host.pp
+++ b/
modules/ferm/manifests/per_host.pp
@@
-304,11
+304,17
@@
REJECT reject-with icmp-admin-prohibited
}
}
ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10: {
}
}
ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10: {
- @ferm::rule { 'dsa-
luca-fixme
':
- description => 'Allow ssh access
from mnt and vpn networks
',
+ @ferm::rule { 'dsa-
ssh-priv
':
+ description => 'Allow ssh access',
rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))',
}
}
rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))',
}
}
+ ubc-node-arm01,ubc-node-arm02,ubc-node-arm03: {
+ @ferm::rule { 'dsa-ssh-priv':
+ description => 'Allow ssh access',
+ rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.43.240 ))',
+ }
+ }
default: {}
}
# tftp
default: {}
}
# tftp