diff options
| author | o <o@immerda.ch> | 2011-04-26 01:13:58 +0200 |
|---|---|---|
| committer | o <o@immerda.ch> | 2011-04-26 01:13:58 +0200 |
| commit | 0db56a86550886ba2d872f920966b7f8692e902b (patch) | |
| tree | a1029c943e382e210e984a516aac422b19e90209 | |
| parent | 7c8cdf47d20460009d560caec21f21346aa48b97 (diff) | |
| download | puppet-shorewall-0db56a86550886ba2d872f920966b7f8692e902b.tar.gz puppet-shorewall-0db56a86550886ba2d872f920966b7f8692e902b.tar.bz2 | |
added ipsec rule
| -rw-r--r-- | manifests/rules/ipsec.pp | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/manifests/rules/ipsec.pp b/manifests/rules/ipsec.pp new file mode 100644 index 0000000..c609d0a --- /dev/null +++ b/manifests/rules/ipsec.pp @@ -0,0 +1,18 @@ +class shorewall::rules::ipsec { + shorewall::rule { 'net-me-ipsec-udp': + source => 'net', + destination => '$FW', + proto => 'udp', + destinationport => '500', + order => 240, + action => 'ACCEPT'; + } + shorewall::rule { 'me-net-ipsec-udp': + source => '$FW', + destination => 'net', + proto => 'udp', + destinationport => '500', + order => 240, + action => 'ACCEPT'; + } +} |