diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2011-08-11 14:11:20 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2011-08-11 14:11:20 -0300 |
| commit | fb4b9946ac9adeda2da07d80e65b56a0cf897339 (patch) | |
| tree | fa83905674992d80af90448fdc6e6a2e9660b75f /manifests/subsystems/firewall.pp | |
| parent | 871b6654ae5088449f8368f3a2a2fa034cf3949e (diff) | |
| download | puppet-nodo-fb4b9946ac9adeda2da07d80e65b56a0cf897339.tar.gz puppet-nodo-fb4b9946ac9adeda2da07d80e65b56a0cf897339.tar.bz2 | |
Rollback git rules
Diffstat (limited to 'manifests/subsystems/firewall.pp')
| -rw-r--r-- | manifests/subsystems/firewall.pp | 17 |
1 files changed, 14 insertions, 3 deletions
diff --git a/manifests/subsystems/firewall.pp b/manifests/subsystems/firewall.pp index 6da94f5..269d645 100644 --- a/manifests/subsystems/firewall.pp +++ b/manifests/subsystems/firewall.pp @@ -445,16 +445,27 @@ class firewall::router::puppetmaster($destination, $puppetmaster_port = '8140', } } -class firewall::router::gitd($destination, $zone = 'vm') { - shorewall::rule { 'git-daemon': +class firewall::router::gitd($destination, $zone = 'fw') { + shorewall::rule { 'git-daemon-1': action => 'DNAT', - source => 'all', + source => 'net', destination => "$zone:$destination:9418", proto => 'tcp', destinationport => '9418', ratelimit => '-', order => '800', } + + shorewall::rule { 'git-daemon-2': + action => 'DNAT', + source => '$FW', + destination => "$zone:$destination:9418", + proto => 'tcp', + destinationport => '9418', + originaldest => "$ipaddress", + ratelimit => '-', + order => '801', + } } class firewall::router::icecast($destination, $zone = 'vm') { |