From 1dd66761a9c71baf9a5164b23018efe7f4c94bf4 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 11 Jul 2016 22:28:27 -0300
Subject: Do not open munin port by default

---
 manifests/init.pp | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/manifests/init.pp b/manifests/init.pp
index a35c89f..c3ebe34 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -178,20 +178,20 @@ class firewall(
     order           => 103,
   }
 
-  $munin_port = $node_munin_port ? {
-    ''      => "4900",
-    default => "$node_munin_port",
-  }
-
-  shorewall::rule { "munin":
-    action          => 'ACCEPT',
-    source          => 'net',
-    destination     => '$FW',
-    proto           => 'tcp',
-    destinationport => "$munin_port",
-    ratelimit       => '-',
-    order           => 104,
-  }
+  #$munin_port = $node_munin_port ? {
+  #  ''      => "4900",
+  #  default => "$node_munin_port",
+  #}
+
+  #shorewall::rule { "munin":
+  #  action          => 'ACCEPT',
+  #  source          => 'net',
+  #  destination     => '$FW',
+  #  proto           => 'tcp',
+  #  destinationport => "$munin_port",
+  #  ratelimit       => '-',
+  #  order           => 104,
+  #}
 
   if $local_net == true {
     class { "firewall::local": }
-- 
cgit v1.2.3