diff options
author | Micah <micah@leap.se> | 2016-07-12 16:45:51 -0400 |
---|---|---|
committer | Micah <micah@leap.se> | 2016-07-12 16:45:51 -0400 |
commit | 6209061fd112fed1715676abb7b6ae4697f21d83 (patch) | |
tree | 72dfcb4c96d32b14504761a229a097784b3fc8a0 /puppet/modules/shorewall/manifests/rules/jabberserver.pp | |
parent | 6083b23278927189de58c11bbb5bc7d93ccced24 (diff) |
git subrepo clone https://leap.se/git/puppet_shorewall puppet/modules/shorewall
subrepo:
subdir: "puppet/modules/shorewall"
merged: "06e89ed"
upstream:
origin: "https://leap.se/git/puppet_shorewall"
branch: "master"
commit: "06e89ed"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: Ief531c1b951e9a1573d31bd9718cc5df11706af5
Diffstat (limited to 'puppet/modules/shorewall/manifests/rules/jabberserver.pp')
-rw-r--r-- | puppet/modules/shorewall/manifests/rules/jabberserver.pp | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/puppet/modules/shorewall/manifests/rules/jabberserver.pp b/puppet/modules/shorewall/manifests/rules/jabberserver.pp new file mode 100644 index 00000000..226d6274 --- /dev/null +++ b/puppet/modules/shorewall/manifests/rules/jabberserver.pp @@ -0,0 +1,34 @@ +# open ports used by a jabberserver +# in and outbound. +class shorewall::rules::jabberserver( + $open_stun = true, +) { + shorewall::rule { + 'net-me-tcp_jabber': + source => 'net', + destination => '$FW', + proto => 'tcp', + destinationport => '5222,5223,5269', + order => 240, + action => 'ACCEPT'; + 'me-net-tcp_jabber_s2s': + source => '$FW', + destination => 'net', + proto => 'tcp', + destinationport => '5260,5269,5270,5271,5272', + order => 240, + action => 'ACCEPT'; + } + + if $open_stun { + shorewall::rule { + 'net-me-udp_jabber_stun_server': + source => 'net', + destination => '$FW', + proto => 'udp', + destinationport => '3478', + order => 240, + action => 'ACCEPT'; + } + } +} |