]> gitweb.fluxo.info Git - puppet-nodo.git/commitdiff
Adding firewall::router::gobby
authorSilvio Rhatto <rhatto@riseup.net>
Fri, 8 Jun 2012 13:55:56 +0000 (10:55 -0300)
committerSilvio Rhatto <rhatto@riseup.net>
Fri, 8 Jun 2012 13:55:56 +0000 (10:55 -0300)
manifests/subsystems/firewall/router.pp

index 7b01be6b5398c138710210739de9ff44bf62ee62..3fc15daa077ebbf6ab9df263cee8ae07742d2f15 100644 (file)
@@ -326,6 +326,29 @@ class firewall::router::torrent($destination, $zone = 'loc', $originaldest = $ip
   }
 }
 
+class firewall::router::gobby($destination, $zone = 'loc', $originaldest = $ipaddress) {
+  shorewall::rule { 'gobby-route-1':
+    action          => 'DNAT',
+    source          => 'net',
+    destination     => "$zone:$destination:6523",
+    proto           => 'tcp',
+    destinationport => '6523',
+    ratelimit       => '-',
+    order           => '600',
+  }
+
+  shorewall::rule { 'gobby-route-2':
+    action          => 'DNAT',
+    source          => '$FW',
+    destination     => "fw:$destination:6523",
+    proto           => 'tcp',
+    destinationport => '6523',
+    originaldest    => "$originaldest",
+    ratelimit       => '-',
+    order           => '601',
+  }
+}
+
 # See http://www.shorewall.net/FAQ.htm#faq2
 define firewall::router::hairpinning($order = '5000', $proto = 'tcp', $port = 'www',
                                      $external_ip = '$ETH0_IP', $interface = 'eth1',