From 0bf3dc82f81c8147b2e4e5e32b3515d6ba373aee Mon Sep 17 00:00:00 2001
From: varac <varacanero@zeromail.org>
Date: Mon, 8 Oct 2012 23:29:35 +0200
Subject: shorewall: allow git access for

---
 puppet/modules/site_shorewall/manifests/eip.pp | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'puppet/modules/site_shorewall/manifests/eip.pp')

diff --git a/puppet/modules/site_shorewall/manifests/eip.pp b/puppet/modules/site_shorewall/manifests/eip.pp
index 9cd332e1..3edd1bcc 100644
--- a/puppet/modules/site_shorewall/manifests/eip.pp
+++ b/puppet/modules/site_shorewall/manifests/eip.pp
@@ -53,6 +53,8 @@ class site_shorewall::eip {
         destination => 'all',
         action      => 'OpenVPN(ACCEPT)',
         order       => 200;
+
+      # eip gw itself to outside
       'fw2all-http':
         source      => '$FW',
         destination => 'all',
@@ -63,6 +65,12 @@ class site_shorewall::eip {
         destination => 'all',
         action      => 'DNS(ACCEPT)',
         order       => 200;
+      'fw2all-DNS':
+        source      => '$FW',
+        destination => 'all',
+        action      => 'Git(ACCEPT)',
+        order       => 200;
+
       'eip2fw-https':
         source      => 'eip',
         destination => '$FW',
-- 
cgit v1.2.3