From: Silvio Rhatto <rhatto@riseup.net>
Date: Fri, 16 Oct 2015 20:42:08 +0000 (-0300)
Subject: Adds firewall::router::rsync
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=ddefe2e18b2384f700e9b3ea131added98bc8baa;p=puppet-firewall.git

Adds firewall::router::rsync
---

diff --git a/manifests/router/rsync.pp b/manifests/router/rsync.pp
new file mode 100644
index 0000000..e185981
--- /dev/null
+++ b/manifests/router/rsync.pp
@@ -0,0 +1,29 @@
+define firewall::router::rsync($destination, $port_orig = '873', $port_dest = '', $zone = 'loc',
+                             $originaldest = $ipaddress) {
+  shorewall::rule { "rsync-$name-1":
+    action          => 'DNAT',
+    source          => 'net',
+    destination     => $port_dest ? {
+      ''      => "$zone:$destination",
+      default => "$zone:$destination:$port_dest",
+    },
+    proto           => 'tcp',
+    destinationport => "$port_orig",
+    ratelimit       => '-',
+    order           => "26$port_orig",
+  }
+
+  shorewall::rule { "rsync-$name-2":
+    action          => 'DNAT',
+    source          => '$FW',
+    destination     => $port_dest ? {
+      ''      => "$zone:$destination",
+      default => "$zone:$destination:$port_dest",
+    },
+    proto           => 'tcp',
+    destinationport => "$port_orig",
+    originaldest    => "$originaldest",
+    ratelimit       => '-',
+    order           => "26$port_orig",
+  }
+}