summaryrefslogtreecommitdiff
path: root/manifests/rules/ipsec_nat.pp
diff options
context:
space:
mode:
authorMicah <micah@leap.se>2016-05-24 10:19:26 -0400
committerMicah <micah@leap.se>2016-05-24 10:19:26 -0400
commitb0e1e4c82db3c70ddc67639a9b983de89b415477 (patch)
treeec1cfae175cc939dc5d2b5c99150480e31eae295 /manifests/rules/ipsec_nat.pp
Squashed 'puppet/modules/shorewall/' content from commit 34fbca6
git-subtree-dir: puppet/modules/shorewall git-subtree-split: 34fbca68d478c2edd5f13e74245cf675b5b53303
Diffstat (limited to 'manifests/rules/ipsec_nat.pp')
-rw-r--r--manifests/rules/ipsec_nat.pp18
1 files changed, 18 insertions, 0 deletions
diff --git a/manifests/rules/ipsec_nat.pp b/manifests/rules/ipsec_nat.pp
new file mode 100644
index 00000000..6c0d5072
--- /dev/null
+++ b/manifests/rules/ipsec_nat.pp
@@ -0,0 +1,18 @@
+class shorewall::rules::ipsec_nat {
+ shorewall::rule {
+ 'net-me-ipsec-nat-udp':
+ source => 'net',
+ destination => '$FW',
+ proto => 'udp',
+ destinationport => '4500',
+ order => 240,
+ action => 'ACCEPT';
+ 'me-net-ipsec-nat-udp':
+ source => '$FW',
+ destination => 'net',
+ proto => 'udp',
+ destinationport => '4500',
+ order => 240,
+ action => 'ACCEPT';
+ }
+}