aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystems/firewall
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2011-08-23 19:36:53 -0300
committerSilvio Rhatto <rhatto@riseup.net>2011-08-23 19:36:53 -0300
commitd6c73a6e8dca74894db8de86b3b1d740ee841ca5 (patch)
tree7d16cf7ea597af489d74bbdfd8f7b9fb9fcb2ca4 /manifests/subsystems/firewall
parenta98128cf49d74eecd268a82dedc2e7c03c249b5e (diff)
downloadpuppet-nodo-d6c73a6e8dca74894db8de86b3b1d740ee841ca5.tar.gz
puppet-nodo-d6c73a6e8dca74894db8de86b3b1d740ee841ca5.tar.bz2
Additional DNS rule
Diffstat (limited to 'manifests/subsystems/firewall')
-rw-r--r--manifests/subsystems/firewall/vserver.pp18
1 files changed, 14 insertions, 4 deletions
diff --git a/manifests/subsystems/firewall/vserver.pp b/manifests/subsystems/firewall/vserver.pp
index 8273c47..784c38d 100644
--- a/manifests/subsystems/firewall/vserver.pp
+++ b/manifests/subsystems/firewall/vserver.pp
@@ -279,6 +279,16 @@ define firewall::vserver::munin($destination, $port_orig, $port_dest = '', $orde
}
class firewall::vserver::dns($destination, $zone = 'vm') {
+ shorewall::rule { 'dns-route-0':
+ action => 'DNS/ACCEPT',
+ source => 'net',
+ destination => '$FW',
+ proto => '-',
+ destinationport => '-',
+ ratelimit => '-',
+ order => '2000',
+ }
+
shorewall::rule { 'dns-route-1':
action => 'DNAT',
source => 'net',
@@ -286,7 +296,7 @@ class firewall::vserver::dns($destination, $zone = 'vm') {
proto => 'tcp',
destinationport => '53',
ratelimit => '-',
- order => '2000',
+ order => '2001',
}
shorewall::rule { 'dns-route-2':
@@ -297,7 +307,7 @@ class firewall::vserver::dns($destination, $zone = 'vm') {
destinationport => '53',
originaldest => "$ipaddress",
ratelimit => '-',
- order => '2001',
+ order => '2002',
}
shorewall::rule { 'dns-route-3':
@@ -307,7 +317,7 @@ class firewall::vserver::dns($destination, $zone = 'vm') {
proto => 'udp',
destinationport => '53',
ratelimit => '-',
- order => '2002',
+ order => '2003',
}
shorewall::rule { 'dns-route-4':
@@ -318,6 +328,6 @@ class firewall::vserver::dns($destination, $zone = 'vm') {
destinationport => '53',
originaldest => "$ipaddress",
ratelimit => '-',
- order => '2003',
+ order => '2004',
}
}