diff options
| author | Micah <micah@riseup.net> | 2015-12-09 14:41:31 +0000 |
|---|---|---|
| committer | Micah <micah@riseup.net> | 2015-12-09 14:41:31 +0000 |
| commit | edd5db0159d5075609c545fb3ee10727a1cf5271 (patch) | |
| tree | d6a923dd8aaeed28210272c1895d9f23d8b250d3 /manifests/rules/dns_rules.pp | |
| parent | 1cfb479d642bc106ea71596a49b3c152dcb2f64f (diff) | |
| parent | 6bca4007a104cc7f1736613679b171f19a706685 (diff) | |
| download | puppet-shorewall-edd5db0159d5075609c545fb3ee10727a1cf5271.tar.gz puppet-shorewall-edd5db0159d5075609c545fb3ee10727a1cf5271.tar.bz2 | |
Merge branch 'immerda_changes' into 'master'
shared
Immerda changes
See merge request !5
Diffstat (limited to 'manifests/rules/dns_rules.pp')
| -rw-r--r-- | manifests/rules/dns_rules.pp | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/manifests/rules/dns_rules.pp b/manifests/rules/dns_rules.pp new file mode 100644 index 0000000..abe0eb5 --- /dev/null +++ b/manifests/rules/dns_rules.pp @@ -0,0 +1,22 @@ +# open dns port +define shorewall::rules::dns_rules( + $source = $name, + $action = 'ACCEPT', +) { + shorewall::rule { + "${source}-me-tcp_dns": + source => $source, + destination => '$FW', + proto => 'tcp', + destinationport => '53', + order => 240, + action => $action; + "${source}-me-udp_dns": + source => $source, + destination => '$FW', + proto => 'udp', + destinationport => '53', + order => 240, + action => $action; + } +} |