From: Silvio Rhatto <rhatto@riseup.net>
Date: Fri, 21 Dec 2012 18:51:20 +0000 (-0200)
Subject: Enabling smtps port at firewall::vserver::mail
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=115564ff9f1c903a4b344d45e8ab681a71b2a1e0;p=puppet-nodo.git

Enabling smtps port at firewall::vserver::mail
---

diff --git a/manifests/subsystems/firewall/vserver.pp b/manifests/subsystems/firewall/vserver.pp
index c244e09..4415952 100644
--- a/manifests/subsystems/firewall/vserver.pp
+++ b/manifests/subsystems/firewall/vserver.pp
@@ -218,6 +218,27 @@ class firewall::vserver::mail($destination, $zone = 'fw') {
     ratelimit       => "$firewall_ssl_ratelimit",
     order           => '1003',
   }
+
+  shorewall::rule { 'mail-5':
+    action          => 'DNAT',
+    source          => 'net',
+    destination     => "$zone:$destination:587",
+    proto           => 'tcp',
+    destinationport => '587',
+    ratelimit       => "$firewall_ssl_ratelimit",
+    order           => '1004',
+  }
+
+  shorewall::rule { 'mail-6':
+    action          => 'DNAT',
+    source          => '$FW',
+    destination     => "$zone:$destination:587",
+    proto           => 'tcp',
+    destinationport => '587',
+    originaldest    => "$ipaddress",
+    ratelimit       => "$firewall_ssl_ratelimit",
+    order           => '1005',
+  }
 }
 
 define firewall::vserver::ssh($destination, $port_orig = '22', $port_dest = '', $zone = 'vm') {