diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2011-09-13 23:01:28 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2011-09-13 23:01:28 -0300 |
| commit | 79a30a8caef2bbbf6ba6b148c8a47c7787039c49 (patch) | |
| tree | 8ed6ff8f16e4148428634cdceedf7e6cbdd2cadc /manifests/subsystems/firewall | |
| parent | 156dd397756e11b2065c518e8c15af480898208d (diff) | |
| download | puppet-nodo-79a30a8caef2bbbf6ba6b148c8a47c7787039c49.tar.gz puppet-nodo-79a30a8caef2bbbf6ba6b148c8a47c7787039c49.tar.bz2 | |
Enhancing firewall::openvpn rules
Diffstat (limited to 'manifests/subsystems/firewall')
| -rw-r--r-- | manifests/subsystems/firewall/openvpn.pp | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/manifests/subsystems/firewall/openvpn.pp b/manifests/subsystems/firewall/openvpn.pp index 51b31fe..f5e8c94 100644 --- a/manifests/subsystems/firewall/openvpn.pp +++ b/manifests/subsystems/firewall/openvpn.pp @@ -12,18 +12,25 @@ class firewall::openvpn { sourcezone => 'loc', destinationzone => 'vpn', policy => 'ACCEPT', - order => '1', + order => '20', } shorewall::policy { 'vpn-loc': sourcezone => 'vpn', destinationzone => 'loc', policy => 'ACCEPT', - order => '1', + order => '21', + } + + shorewall::policy { 'fw-vpn': + sourcezone => '$FW', + destinationzone => 'vpn', + policy => 'ACCEPT', + order => '22', } shorewall::tunnel { 'openvpn': - tunnel_type => 'openvpn', + tunnel_type => 'openvpnclient', zone => 'net', } } |