aboutsummaryrefslogtreecommitdiff
path: root/manifests/rules
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2012-12-30 14:40:44 +0100
committerintrigeri <intrigeri@boum.org>2012-12-30 14:40:44 +0100
commit1a7d66e160077f625fd86d21b3566dcb489a0d54 (patch)
tree0b12a3e17ffa42a663e1cbaba7a3f518cb02a576 /manifests/rules
parent7e59740db08d95ec11677872752ec99b3bf10a30 (diff)
parentb2499eb83c6a55ecebc92e9150cd383eac423fc2 (diff)
downloadpuppet-shorewall-1a7d66e160077f625fd86d21b3566dcb489a0d54.tar.gz
puppet-shorewall-1a7d66e160077f625fd86d21b3566dcb489a0d54.tar.bz2
Merge remote-tracking branch 'immerda/master'
Diffstat (limited to 'manifests/rules')
-rw-r--r--manifests/rules/ipsec_nat.pp18
1 files changed, 18 insertions, 0 deletions
diff --git a/manifests/rules/ipsec_nat.pp b/manifests/rules/ipsec_nat.pp
new file mode 100644
index 0000000..6c0d507
--- /dev/null
+++ b/manifests/rules/ipsec_nat.pp
@@ -0,0 +1,18 @@
+class shorewall::rules::ipsec_nat {
+ shorewall::rule {
+ 'net-me-ipsec-nat-udp':
+ source => 'net',
+ destination => '$FW',
+ proto => 'udp',
+ destinationport => '4500',
+ order => 240,
+ action => 'ACCEPT';
+ 'me-net-ipsec-nat-udp':
+ source => '$FW',
+ destination => 'net',
+ proto => 'udp',
+ destinationport => '4500',
+ order => 240,
+ action => 'ACCEPT';
+ }
+}