diff options
| -rw-r--r-- | manifests/redirect.pp | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/manifests/redirect.pp b/manifests/redirect.pp index 7a9734a..d3785a1 100644 --- a/manifests/redirect.pp +++ b/manifests/redirect.pp @@ -2,10 +2,12 @@ class firewall::redirect::ssh($destinationport) { # When the box is in an internal network and we want to provide # and external access through a shared real IP, we have to # redirect requests coming from another port to port 22. + $ip = hiera('firewall::external_ip', $::ipaddress) + shorewall::rule { "ssh-redirect-1": action => 'DNAT', source => 'net', - destination => "fw:$ipaddress:22", + destination => "fw:$ip:22", proto => 'tcp', destinationport => $destinationport, ratelimit => '-', |