From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 12 Jul 2016 01:28:27 +0000 (-0300)
Subject: Do not open munin port by default
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=1dd66761a9c71baf9a5164b23018efe7f4c94bf4;p=puppet-firewall.git

Do not open munin port by default
---

diff --git a/manifests/init.pp b/manifests/init.pp
index a35c89f..c3ebe34 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -178,20 +178,20 @@ class firewall(
     order           => 103,
   }
 
-  $munin_port = $node_munin_port ? {
-    ''      => "4900",
-    default => "$node_munin_port",
-  }
-
-  shorewall::rule { "munin":
-    action          => 'ACCEPT',
-    source          => 'net',
-    destination     => '$FW',
-    proto           => 'tcp',
-    destinationport => "$munin_port",
-    ratelimit       => '-',
-    order           => 104,
-  }
+  #$munin_port = $node_munin_port ? {
+  #  ''      => "4900",
+  #  default => "$node_munin_port",
+  #}
+
+  #shorewall::rule { "munin":
+  #  action          => 'ACCEPT',
+  #  source          => 'net',
+  #  destination     => '$FW',
+  #  proto           => 'tcp',
+  #  destinationport => "$munin_port",
+  #  ratelimit       => '-',
+  #  order           => 104,
+  #}
 
   if $local_net == true {
     class { "firewall::local": }