diff options
author | intrigeri <intrigeri@boum.org> | 2012-12-30 14:40:44 +0100 |
---|---|---|
committer | intrigeri <intrigeri@boum.org> | 2012-12-30 14:40:44 +0100 |
commit | 1a7d66e160077f625fd86d21b3566dcb489a0d54 (patch) | |
tree | 0b12a3e17ffa42a663e1cbaba7a3f518cb02a576 /manifests/rules | |
parent | 7e59740db08d95ec11677872752ec99b3bf10a30 (diff) | |
parent | b2499eb83c6a55ecebc92e9150cd383eac423fc2 (diff) | |
download | puppet-shorewall-1a7d66e160077f625fd86d21b3566dcb489a0d54.tar.gz puppet-shorewall-1a7d66e160077f625fd86d21b3566dcb489a0d54.tar.bz2 |
Merge remote-tracking branch 'immerda/master'
Diffstat (limited to 'manifests/rules')
-rw-r--r-- | manifests/rules/ipsec_nat.pp | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/manifests/rules/ipsec_nat.pp b/manifests/rules/ipsec_nat.pp new file mode 100644 index 0000000..6c0d507 --- /dev/null +++ b/manifests/rules/ipsec_nat.pp @@ -0,0 +1,18 @@ +class shorewall::rules::ipsec_nat { + shorewall::rule { + 'net-me-ipsec-nat-udp': + source => 'net', + destination => '$FW', + proto => 'udp', + destinationport => '4500', + order => 240, + action => 'ACCEPT'; + 'me-net-ipsec-nat-udp': + source => '$FW', + destination => 'net', + proto => 'udp', + destinationport => '4500', + order => 240, + action => 'ACCEPT'; + } +} |