From ca35aa47958d13c3fdeed2eda042c5ce1b8312e8 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 15 Jul 2010 16:03:36 -0300
Subject: Changing firewall policies order

---
 manifests/subsystems/firewall.pp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'manifests/subsystems/firewall.pp')

diff --git a/manifests/subsystems/firewall.pp b/manifests/subsystems/firewall.pp
index 5985c13..75549ac 100644
--- a/manifests/subsystems/firewall.pp
+++ b/manifests/subsystems/firewall.pp
@@ -51,7 +51,7 @@ class firewall {
     sourcezone      => 'all',
     destinationzone => 'all',
     policy          => 'REJECT',
-    order           => '5',
+    order           => '90',
   }
 
   #
@@ -214,21 +214,21 @@ class firewall {
       sourcezone      => 'dmz',
       destinationzone => 'all',
       policy          => 'ACCEPT',
-      order           => '6',
+      order           => '5',
     }
   
     shorewall::policy { 'vm-dmz':
       sourcezone      => 'vm',
       destinationzone => 'dmz',
       policy          => 'ACCEPT',
-      order           => '7',
+      order           => '6',
     }
   
     shorewall::policy { 'fw-dmz':
       sourcezone      => '$FW',
       destinationzone => 'dmz',
       policy          => 'ACCEPT',
-      order           => '8',
+      order           => '7',
     }
   
     shorewall::zone { 'dmz':
-- 
cgit v1.2.3