summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2013-02-09 15:05:16 +0100
committervarac <varacanero@zeromail.org>2013-02-09 15:05:16 +0100
commit5c0d817778b57b253c7443145fa928547f48e9f5 (patch)
tree1aa6a73768aa011ed5184b5dfc422b5dca0dcdc1
parentbda22dea464eddeb9a8be4e8513a8e4d1d3cbe8d (diff)
site_shorewall::monitor: allow port 80 + 443
-rw-r--r--puppet/modules/site_nagios/manifests/server.pp1
-rw-r--r--puppet/modules/site_shorewall/manifests/monitor.pp18
2 files changed, 19 insertions, 0 deletions
diff --git a/puppet/modules/site_nagios/manifests/server.pp b/puppet/modules/site_nagios/manifests/server.pp
index 5e2f832b..c98a8a1f 100644
--- a/puppet/modules/site_nagios/manifests/server.pp
+++ b/puppet/modules/site_nagios/manifests/server.pp
@@ -34,4 +34,5 @@ class site_nagios::server inherits nagios::base {
}
site_nagios::add_host {$hosts:}
+ include site_shorewall::monitor
}
diff --git a/puppet/modules/site_shorewall/manifests/monitor.pp b/puppet/modules/site_shorewall/manifests/monitor.pp
new file mode 100644
index 00000000..af9f8bfe
--- /dev/null
+++ b/puppet/modules/site_shorewall/manifests/monitor.pp
@@ -0,0 +1,18 @@
+class site_shorewall::monitor {
+
+ include site_shorewall::defaults
+
+ shorewall::rule {
+ 'net2fw-https':
+ source => 'net',
+ destination => '$FW',
+ action => 'HTTPS(ACCEPT)',
+ order => 200;
+ 'net2fw-http':
+ source => 'net',
+ destination => '$FW',
+ action => 'HTTP(ACCEPT)',
+ order => 200;
+ }
+
+}