From b817cb0d8056964025a9bde4d5b82acb922c87a6 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Fri, 21 Dec 2012 17:50:32 -0200
Subject: Adding smtps rules at firewall::router::mail

---
 manifests/subsystems/firewall/router.pp | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

(limited to 'manifests/subsystems/firewall')

diff --git a/manifests/subsystems/firewall/router.pp b/manifests/subsystems/firewall/router.pp
index 3fc15da..29d43a5 100644
--- a/manifests/subsystems/firewall/router.pp
+++ b/manifests/subsystems/firewall/router.pp
@@ -220,6 +220,27 @@ class firewall::router::mail($destination, $zone = 'loc', $originaldest = $ipadd
     ratelimit       => '-',
     order           => '1003',
   }
+
+  shorewall::rule { 'mail-5':
+    action          => 'DNAT',
+    source          => 'net',
+    destination     => "$zone:$destination:587",
+    proto           => 'tcp',
+    destinationport => '587',
+    ratelimit       => '-',
+    order           => '1004',
+  }
+
+  shorewall::rule { 'mail-6':
+    action          => 'DNAT',
+    source          => '$FW',
+    destination     => "$zone:$destination:587",
+    proto           => 'tcp',
+    destinationport => '587',
+    originaldest    => "$originaldest",
+    ratelimit       => '-',
+    order           => '1005',
+  }
 }
 
 define firewall::router::ssh($destination, $port_orig = '22', $port_dest = '', $zone = 'loc',
-- 
cgit v1.2.3