summaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
authoram <am@d66ca3ae-40d7-4aa7-90d4-87d79ca94279>2007-11-27 08:00:42 +0000
committeram <am@d66ca3ae-40d7-4aa7-90d4-87d79ca94279>2007-11-27 08:00:42 +0000
commit1531b29d3452eb119c3a8ca26a48d4d0bcae9e76 (patch)
treec3607745d4b9d628e2175f07a444e18c6eea52c7 /manifests
parente11235214ba768a14c2a04293e352c7678e5f206 (diff)
downloadpuppet-shorewall-1531b29d3452eb119c3a8ca26a48d4d0bcae9e76.tar.gz
puppet-shorewall-1531b29d3452eb119c3a8ca26a48d4d0bcae9e76.tar.bz2
*masq-source address wurde von "name" genomme: absolut verwirrend... korrektur: neue variable source + order
*richtige anwendung von SECTION am anfang von rule git-svn-id: https://svn/ipuppet/trunk/modules/shorewall@118 d66ca3ae-40d7-4aa7-90d4-87d79ca94279
Diffstat (limited to 'manifests')
-rw-r--r--manifests/init.pp8
1 files changed, 5 insertions, 3 deletions
diff --git a/manifests/init.pp b/manifests/init.pp
index 5cb3c5e..128e330 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -140,9 +140,11 @@ class shorewall {
# See http://www.shorewall.net/3.0/Documentation.htm#Masq
managed_file{ masq: }
# mark is new in 3.4.4
- define masq($interface, $address, $proto = '-', $port = '-', $ipsec = '-', $mark = '') {
- entry { "masq.d/${name}":
- line => "${interface} ${name} ${address} ${proto} ${port} ${ipsec} ${mark}"
+ # source (= subnet) = Set of hosts that you wish to masquerade.
+ # address = If you specify an address here, SNAT will be used and this will be the source address.
+ define masq($interface, $source, $address = '-', $proto = '-', $port = '-', $ipsec = '-', $mark = '', $order='100' ) {
+ entry { "masq.d/${order}-${name}":
+ line => "${interface} ${source} ${address} ${proto} ${port} ${ipsec} ${mark}"
}
}