add keyserver rules

diff --git a/manifests/rules/keyserver.pp b/manifests/rules/keyserver.pp
new file mode 100644 (file)
index 0000000..41c5d3b
--- /dev/null
+++ b/manifests/rules/keyserver.pp
@@ -0,0 +1,11 @@
+class shorewall::rules::keyserver {
+       shorewall::rule {
+               'net-me-tcp_keyserver':
+      source      => 'net',
+               destination     => '$FW',
+               proto           => 'tcp',
+                 destinationport => '11371',
+               order           => 240,
+           action          => 'ACCEPT';
+       }
+}

diff --git a/manifests/rules/out/keyserver.pp b/manifests/rules/out/keyserver.pp
new file mode 100644 (file)
index 0000000..45fdf62
--- /dev/null
+++ b/manifests/rules/out/keyserver.pp
@@ -0,0 +1,11 @@
+class shorewall::rules::out::keyserver {
+  shorewall::rule {
+    'me-net-tcp_keyserver':
+      source          =>  '$FW',
+      destination     =>  'net',
+      proto           =>  'tcp',
+      destinationport =>  '11371',
+      order           =>  240,
+      action          => 'ACCEPT'; 
+ }
+}