diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2018-06-16 13:20:27 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2018-06-16 13:20:27 -0300 |
| commit | e06d326f0be9f69bf4fa3b695f898c1cb9c5b200 (patch) | |
| tree | afd54c4e28d3c5f4d0ad2afb2ba34b14110c634b /manifests/router | |
| parent | 89686e0a56cc60c0079e9a5e4d0fe2fb9c01060d (diff) | |
| download | puppet-firewall-e06d326f0be9f69bf4fa3b695f898c1cb9c5b200.tar.gz puppet-firewall-e06d326f0be9f69bf4fa3b695f898c1cb9c5b200.tar.bz2 | |
Updates Tor relay rules
Diffstat (limited to 'manifests/router')
| -rw-r--r-- | manifests/router/tor.pp | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/manifests/router/tor.pp b/manifests/router/tor.pp index 710b4a0..cf5cc58 100644 --- a/manifests/router/tor.pp +++ b/manifests/router/tor.pp @@ -40,4 +40,46 @@ define firewall::router::tor($destination, $zone = 'loc', $originaldest = $ipadd ratelimit => '-', order => "29001", } + + shorewall::rule { "tor-$name-5": + action => 'DNAT', + source => 'net', + destination => "$zone:$destination:9100", + proto => 'tcp', + destinationport => "9100", + ratelimit => '-', + order => "29100", + } + + shorewall::rule { "tor-$name-6": + action => 'DNAT', + source => '$FW', + destination => "$zone:$destination:9100", + proto => 'tcp', + destinationport => "9100", + originaldest => "$originaldest", + ratelimit => '-', + order => "29100", + } + + shorewall::rule { "tor-$name-7": + action => 'DNAT', + source => 'net', + destination => "$zone:$destination:9101", + proto => 'tcp', + destinationport => "9101", + ratelimit => '-', + order => "29101", + } + + shorewall::rule { "tor-$name-8": + action => 'DNAT', + source => '$FW', + destination => "$zone:$destination:9101", + proto => 'tcp', + destinationport => "9101", + originaldest => "$originaldest", + ratelimit => '-', + order => "29101", + } } |