From 40a3ba49d07e000321c361f2712da47557415fab Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Fri, 2 Oct 2009 13:56:23 +0200
Subject: add puppet rules

---
 manifests/rules/out/puppet.pp | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 manifests/rules/out/puppet.pp

(limited to 'manifests/rules/out/puppet.pp')

diff --git a/manifests/rules/out/puppet.pp b/manifests/rules/out/puppet.pp
new file mode 100644
index 0000000..5cd4643
--- /dev/null
+++ b/manifests/rules/out/puppet.pp
@@ -0,0 +1,12 @@
+class shorewall::rules::out::puppet {
+    include ::shorewall::rules::puppet
+    # we want to connect to the puppet server
+    shorewall::rule { 'me-net-puppet_tcp':
+        source          =>      '$FW',
+        destination     =>      'net:$PUPPETSERVER',
+        proto           =>      'tcp',
+        destinationport =>      '$PUPPETSERVER_PORT,$PUPPETSERVER_SIGN_PORT',
+        order           =>      340,
+        action          =>      'ACCEPT';
+    }
+}
-- 
cgit v1.2.3