diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2016-03-23 20:01:11 -0300 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2016-03-23 20:01:11 -0300 |
commit | dffe0d74eadc7c25ab9ee513cb3a6b345dfa7644 (patch) | |
tree | 53e848d9d576687ec2c032564b6c42ba21b678f1 /manifests/rules/jabberserver.pp | |
parent | 589f5723d500ad7325e19dfeb1d3b8450044acf1 (diff) | |
parent | edd5db0159d5075609c545fb3ee10727a1cf5271 (diff) | |
download | puppet-shorewall-dffe0d74eadc7c25ab9ee513cb3a6b345dfa7644.tar.gz puppet-shorewall-dffe0d74eadc7c25ab9ee513cb3a6b345dfa7644.tar.bz2 |
Conflicts:
manifests/tunnel.pp
Diffstat (limited to 'manifests/rules/jabberserver.pp')
-rw-r--r-- | manifests/rules/jabberserver.pp | 41 |
1 files changed, 28 insertions, 13 deletions
diff --git a/manifests/rules/jabberserver.pp b/manifests/rules/jabberserver.pp index 3b38b29..226d627 100644 --- a/manifests/rules/jabberserver.pp +++ b/manifests/rules/jabberserver.pp @@ -1,19 +1,34 @@ -class shorewall::rules::jabberserver { +# open ports used by a jabberserver +# in and outbound. +class shorewall::rules::jabberserver( + $open_stun = true, +) { shorewall::rule { 'net-me-tcp_jabber': - source => 'net', - destination => '$FW', - proto => 'tcp', - destinationport => '5222,5223,5269', - order => 240, - action => 'ACCEPT'; + source => 'net', + destination => '$FW', + proto => 'tcp', + destinationport => '5222,5223,5269', + order => 240, + action => 'ACCEPT'; 'me-net-tcp_jabber_s2s': - source => '$FW', - destination => 'net', - proto => 'tcp', - destinationport => '5260,5269,5270,5271,5272', - order => 240, - action => 'ACCEPT'; + source => '$FW', + destination => 'net', + proto => 'tcp', + destinationport => '5260,5269,5270,5271,5272', + order => 240, + action => 'ACCEPT'; } + if $open_stun { + shorewall::rule { + 'net-me-udp_jabber_stun_server': + source => 'net', + destination => '$FW', + proto => 'udp', + destinationport => '3478', + order => 240, + action => 'ACCEPT'; + } + } } |