From: Silvio Rhatto <rhatto@riseup.net>
Date: Sun, 14 Mar 2010 23:03:15 +0000 (+0000)
Subject: Adding additional rules for puppetmaster
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=8c41ba01c67fb3f5317a55d7c4657de037f3ed32;p=puppet-nodo.git

Adding additional rules for puppetmaster
---

diff --git a/manifests/init.pp b/manifests/init.pp
index 6ce7eb0..2cfc2da 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -455,6 +455,48 @@ class nodo::vserver inherits nodo {
             ratelimit       => '-',
             order           => '703',
           }
+
+          shorewall::rule { 'puppetmaster-5':
+            action          => 'DNAT',
+            source          => 'net',
+            destination     => "fw:192.168.0.$context:8141",
+            proto           => 'tcp',
+            destinationport => '8141',
+            ratelimit       => '-',
+            order           => '704',
+          }
+
+          shorewall::rule { 'puppetmaster-6':
+            action          => 'DNAT',
+            source          => 'net',
+            destination     => "fw:192.168.0.$context:8141",
+            proto           => 'udp',
+            destinationport => '8141',
+            ratelimit       => '-',
+            order           => '705',
+          }
+
+          shorewall::rule { 'puppetmaster-7':
+            action          => 'DNAT',
+            source          => '$FW',
+            destination     => "fw:192.168.0.$context:8141",
+            proto           => 'tcp',
+            destinationport => '8141',
+            originaldest    => "$ipaddress",
+            ratelimit       => '-',
+            order           => '706',
+          }
+
+          shorewall::rule { 'puppetmaster-8':
+            action          => 'DNAT',
+            source          => '$FW',
+            destination     => "fw:192.168.0.$context:8141",
+            proto           => 'udp',
+            destinationport => '8141',
+            originaldest    => "$ipaddress",
+            ratelimit       => '-',
+            order           => '707',
+          }
         }
 
         if $gitd {