aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystems/firewall/torrent.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2011-08-11 14:37:32 -0300
committerSilvio Rhatto <rhatto@riseup.net>2011-08-11 14:37:32 -0300
commit7f7d3cab9c4b4fc1bdc3827e8ea4c680c73da48d (patch)
tree36d470b1d000b89295c595f8f27d5cc89df46a59 /manifests/subsystems/firewall/torrent.pp
parentfb4b9946ac9adeda2da07d80e65b56a0cf897339 (diff)
downloadpuppet-nodo-7f7d3cab9c4b4fc1bdc3827e8ea4c680c73da48d.tar.gz
puppet-nodo-7f7d3cab9c4b4fc1bdc3827e8ea4c680c73da48d.tar.bz2
Spliting firewall classes along files and separating rules for vservers and routers
Diffstat (limited to 'manifests/subsystems/firewall/torrent.pp')
-rw-r--r--manifests/subsystems/firewall/torrent.pp21
1 files changed, 21 insertions, 0 deletions
diff --git a/manifests/subsystems/firewall/torrent.pp b/manifests/subsystems/firewall/torrent.pp
new file mode 100644
index 0000000..954c71f
--- /dev/null
+++ b/manifests/subsystems/firewall/torrent.pp
@@ -0,0 +1,21 @@
+class firewall::torrent {
+ shorewall::rule { "torrent-tcp":
+ action => 'ACCEPT',
+ source => 'net',
+ destination => '$FW',
+ proto => 'tcp',
+ destinationport => "6881:6999",
+ ratelimit => '-',
+ order => "200",
+ }
+
+ shorewall::rule { "torrent-udp":
+ action => 'ACCEPT',
+ source => 'net',
+ destination => '$FW',
+ proto => 'udp',
+ destinationport => "6881:6999",
+ ratelimit => '-',
+ order => "201",
+ }
+}