]> gitweb.fluxo.info Git - puppet-nodo.git/commitdiff
Changing parameters at firewall::router::hairpinning
authorSilvio Rhatto <rhatto@riseup.net>
Tue, 16 Aug 2011 14:58:54 +0000 (11:58 -0300)
committerSilvio Rhatto <rhatto@riseup.net>
Tue, 16 Aug 2011 14:58:54 +0000 (11:58 -0300)
manifests/subsystems/firewall/router.pp

index cd18c326509fa95ac79ee047ebaed201c88db725..3a8b1afbadf1d040a95a76c4e6180c6ca223c6b8 100644 (file)
@@ -326,11 +326,11 @@ class firewall::router::torrent($destination, $zone = 'loc') {
 # See http://www.shorewall.net/FAQ.htm#faq2
 define firewall::router::hairpinning($order = '200', $proto = 'tcp', $port = 'www',
                                      $external_ip = '$ETH0_IP', $interface = 'eth1',
-                                     $destination = 'loc:192.168.1.100', $source = 'eth1',
-                                     $zone = 'loc') {
+                                     $destination = '192.168.1.100', $source = 'eth1',
+                                     $source_zone = 'loc', $dest_zone = 'loc') {
   shorewall::masq { "routeback-$name":
     interface => "$interface:$destination",
-    source    => $source,
+    source    => $source_zone,
     address   => $external_ip,
     proto     => $proto,
     port      => $port,
@@ -340,7 +340,7 @@ define firewall::router::hairpinning($order = '200', $proto = 'tcp', $port = 'ww
   shorewall::rule { "routeback-$name":
     action          => 'DNAT',
     source          => $zone,
-    destination     => $destination,
+    destination     => "$dest_zone:$destination",
     proto           => $proto,
     destinationport => $port,
     ratelimit       => '-',