diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
| commit | 40a9f5b6d556615ad95085b51ec56585dfbe248d (patch) | |
| tree | 9cc6b3cbf5c767422a1c73ac374127f659f24b26 /manifests/virtual/gobby.pp | |
| parent | 059ddc10d09b87f1e21807d0aedff08745f8701a (diff) | |
| download | puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.gz puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.bz2 | |
Updates some firewall::virtual rules to new kvm scheme
Diffstat (limited to 'manifests/virtual/gobby.pp')
| -rw-r--r-- | manifests/virtual/gobby.pp | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/manifests/virtual/gobby.pp b/manifests/virtual/gobby.pp index 5554a11..162fe1d 100644 --- a/manifests/virtual/gobby.pp +++ b/manifests/virtual/gobby.pp @@ -1,10 +1,22 @@ -class firewall::virtual::gobby($destination, $zone = 'fw') { +class firewall::virtual::gobby($destination) { shorewall::rule { 'gobby-0': action => 'DNAT', + source => 'vm', + destination => "fw:$destination:6523", + proto => 'tcp', + destinationport => '6523', + originaldest => hiera('firewall::external_ip', $::ipaddress), + ratelimit => '-', + order => 2400, + } + + shorewall::rule { 'gobby-1': + action => 'DNAT', source => 'net', - destination => "$zone:$destination:6523", + destination => "vm:$destination:6523", proto => 'tcp', destinationport => '6523', + originaldest => hiera('firewall::external_ip', $::ipaddress), ratelimit => '-', order => 2400, } |