summaryrefslogtreecommitdiff
path: root/puppet/modules/site_shorewall
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2012-10-08 23:29:35 +0200
committervarac <varacanero@zeromail.org>2012-10-08 23:29:35 +0200
commit0bf3dc82f81c8147b2e4e5e32b3515d6ba373aee (patch)
treeb9da5e0aee3c2ecb0b17a8d2235410cd27686da1 /puppet/modules/site_shorewall
parentdd59c82520aba539e15351cc69395ec48fff7999 (diff)
shorewall: allow git access for
Diffstat (limited to 'puppet/modules/site_shorewall')
-rw-r--r--puppet/modules/site_shorewall/manifests/eip.pp8
1 files changed, 8 insertions, 0 deletions
diff --git a/puppet/modules/site_shorewall/manifests/eip.pp b/puppet/modules/site_shorewall/manifests/eip.pp
index 9cd332e1..3edd1bcc 100644
--- a/puppet/modules/site_shorewall/manifests/eip.pp
+++ b/puppet/modules/site_shorewall/manifests/eip.pp
@@ -53,6 +53,8 @@ class site_shorewall::eip {
destination => 'all',
action => 'OpenVPN(ACCEPT)',
order => 200;
+
+ # eip gw itself to outside
'fw2all-http':
source => '$FW',
destination => 'all',
@@ -63,6 +65,12 @@ class site_shorewall::eip {
destination => 'all',
action => 'DNS(ACCEPT)',
order => 200;
+ 'fw2all-DNS':
+ source => '$FW',
+ destination => 'all',
+ action => 'Git(ACCEPT)',
+ order => 200;
+
'eip2fw-https':
source => 'eip',
destination => '$FW',