]> gitweb.fluxo.info Git - puppet-shorewall.git/commitdiff
add ekeyd rules
authormh <mh@immerda.ch>
Tue, 1 Mar 2011 20:52:14 +0000 (21:52 +0100)
committermh <mh@immerda.ch>
Tue, 1 Mar 2011 20:52:14 +0000 (21:52 +0100)
manifests/rules/ekeyd.pp [new file with mode: 0644]
manifests/rules/out/ekeyd.pp [new file with mode: 0644]

diff --git a/manifests/rules/ekeyd.pp b/manifests/rules/ekeyd.pp
new file mode 100644 (file)
index 0000000..dbff02f
--- /dev/null
@@ -0,0 +1,10 @@
+class shorewall::rules::ekeyd {
+  shorewall::rule { 'net-me-tcp_ekeyd':
+    source          => 'net',
+    destination     => '$FW',
+    proto           => 'tcp',
+    destinationport => '8888',
+    order           => 240,
+    action          => 'ACCEPT';
+  }
+}
diff --git a/manifests/rules/out/ekeyd.pp b/manifests/rules/out/ekeyd.pp
new file mode 100644 (file)
index 0000000..ef6f20a
--- /dev/null
@@ -0,0 +1,11 @@
+class shorewall::rules::out::ekeyd($ekeyd_host) {
+  shorewall::rule { 'me-net-tcp_ekeyd':
+    source          => '$FW',
+    destination     => "net:${ekeyd_host}",
+    proto           => 'tcp',
+    destinationport => '8888',
+    order           => 240,
+    action          => 'ACCEPT';
+  }
+}
+