add postgres rules

diff --git a/manifests/rules/out/postgres.pp b/manifests/rules/out/postgres.pp
new file mode 100644 (file)
index 0000000..a62d75d
--- /dev/null
+++ b/manifests/rules/out/postgres.pp
@@ -0,0 +1,11 @@
+class shorewall::rules::out::postgres {
+    shorewall::rule {
+        'me-net-tcp_postgres':
+            source          =>  '$FW',
+            destination     =>  'net',
+            proto           =>  'tcp',
+            destinationport =>  '5432',
+            order           =>  240,
+            action          => 'ACCEPT';
+    }
+}

diff --git a/manifests/rules/postgres.pp b/manifests/rules/postgres.pp
new file mode 100644 (file)
index 0000000..1a22027
--- /dev/null
+++ b/manifests/rules/postgres.pp
@@ -0,0 +1,10 @@
+class shorewall::rules::postgres {
+    shorewall::rule { 'net-me-tcp_postgres':
+        source          => 'net',
+        destination     => '$FW',
+        proto           => 'tcp',
+        destinationport => '5432',
+        order           => 250,
+        action          => 'ACCEPT';
+    }
+}