summaryrefslogtreecommitdiff
path: root/manifests/init.pp
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/init.pp')
-rw-r--r--manifests/init.pp5
1 files changed, 3 insertions, 2 deletions
diff --git a/manifests/init.pp b/manifests/init.pp
index c3ebe34..c812955 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -5,7 +5,8 @@ class firewall(
$local_net = hiera('firewall::local_net', false),
$device_options = hiera('firewall::device_options', 'tcpflags,blacklist,routefilter,nosmurfs,logmartians'),
$vm_address = hiera('firewall::vm_address', '192.168.0.0/24'),
- $vm_device = hiera('firewall::vm_device', false)
+ $vm_device = hiera('firewall::vm_device', false),
+ $ssh = hiera('firewall::ssh', 'ACCEPT'),
) {
class { 'shorewall': }
@@ -137,7 +138,7 @@ class firewall(
# Rules
#
shorewall::rule { 'ssh':
- action => 'SSH/ACCEPT',
+ action => "SSH/${ssh}",
source => 'net',
destination => '$FW',
proto => '-',