Squashed 'puppet/modules/shorewall/' content from commit 34fbca6

git-subtree-dir: puppet/modules/shorewall
git-subtree-split: 34fbca68d478c2edd5f13e74245cf675b5b53303

1 files changed, 32 insertions, 0 deletions

diff --git a/manifests/rules/ipsec.pp b/manifests/rules/ipsec.pp
new file mode 100644
index 00000000..82adff09
--- /dev/null
+++ b/manifests/rules/ipsec.pp
@@ -0,0 +1,32 @@
+class shorewall::rules::ipsec(
+  $source = 'net'
+) {
+    shorewall::rule {
+      'net-me-ipsec-udp':
+        source          => $shorewall::rules::ipsec::source,
+        destination     => '$FW',
+        proto           => 'udp',
+        destinationport => '500',
+        order           => 240,
+        action          => 'ACCEPT';
+      'me-net-ipsec-udp':
+        source          => '$FW',
+        destination     => $shorewall::rules::ipsec::source,
+        proto           => 'udp',
+        destinationport => '500',
+        order           => 240,
+        action          => 'ACCEPT';
+      'net-me-ipsec':
+        source          => $shorewall::rules::ipsec::source,
+        destination     => '$FW',
+        proto           => 'esp',
+        order           => 240,
+        action          => 'ACCEPT';
+      'me-net-ipsec':
+        source          => '$FW',
+        destination     => $shorewall::rules::ipsec::source,
+        proto           => 'esp',
+        order           => 240,
+        action          => 'ACCEPT';
+    }
+}