]> gitweb.fluxo.info Git - puppet-nodo.git/commitdiff
Changing firewall policies order
authorSilvio Rhatto <rhatto@riseup.net>
Thu, 15 Jul 2010 19:03:36 +0000 (16:03 -0300)
committerSilvio Rhatto <rhatto@riseup.net>
Thu, 15 Jul 2010 19:03:36 +0000 (16:03 -0300)
manifests/subsystems/firewall.pp

index 5985c13f9b52d45ccf0294c118942b06023b8edb..75549ac09ae9cd36a9e134c142da080b318cc22b 100644 (file)
@@ -51,7 +51,7 @@ class firewall {
     sourcezone      => 'all',
     destinationzone => 'all',
     policy          => 'REJECT',
-    order           => '5',
+    order           => '90',
   }
 
   #
@@ -214,21 +214,21 @@ class firewall {
       sourcezone      => 'dmz',
       destinationzone => 'all',
       policy          => 'ACCEPT',
-      order           => '6',
+      order           => '5',
     }
   
     shorewall::policy { 'vm-dmz':
       sourcezone      => 'vm',
       destinationzone => 'dmz',
       policy          => 'ACCEPT',
-      order           => '7',
+      order           => '6',
     }
   
     shorewall::policy { 'fw-dmz':
       sourcezone      => '$FW',
       destinationzone => 'dmz',
       policy          => 'ACCEPT',
-      order           => '8',
+      order           => '7',
     }
   
     shorewall::zone { 'dmz':