diff options
| author | mh <mh@immerda.ch> | 2011-04-26 03:08:37 +0200 |
|---|---|---|
| committer | mh <mh@immerda.ch> | 2011-04-26 03:08:37 +0200 |
| commit | fdc7a438272e1d59d8f9279af2ec10c9cf44f646 (patch) | |
| tree | 013ea60c103dd7ddee68c85c96f101adc2af326a | |
| parent | 0db56a86550886ba2d872f920966b7f8692e902b (diff) | |
| download | puppet-shorewall-fdc7a438272e1d59d8f9279af2ec10c9cf44f646.tar.gz puppet-shorewall-fdc7a438272e1d59d8f9279af2ec10c9cf44f646.tar.bz2 | |
allow esp traffic from and to me
| -rw-r--r-- | manifests/rules/ipsec.pp | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/manifests/rules/ipsec.pp b/manifests/rules/ipsec.pp index c609d0a..3e9db55 100644 --- a/manifests/rules/ipsec.pp +++ b/manifests/rules/ipsec.pp @@ -1,18 +1,30 @@ class shorewall::rules::ipsec { - shorewall::rule { 'net-me-ipsec-udp': + shorewall::rule { + 'net-me-ipsec-udp': source => 'net', destination => '$FW', proto => 'udp', destinationport => '500', order => 240, action => 'ACCEPT'; - } - shorewall::rule { 'me-net-ipsec-udp': + 'me-net-ipsec-udp': source => '$FW', destination => 'net', proto => 'udp', destinationport => '500', order => 240, action => 'ACCEPT'; + 'net-me-ipsec': + source => 'net', + destination => '$FW', + proto => 'esp', + order => 240, + action => 'ACCEPT'; + 'me-net-ipsec': + source => '$FW', + destination => 'net', + proto => 'esp', + order => 240, + action => 'ACCEPT'; } } |