diff options
author | mh <mh@immerda.ch> | 2017-04-25 15:28:26 +0200 |
---|---|---|
committer | mh <mh@immerda.ch> | 2017-04-25 15:41:09 +0200 |
commit | c2bf7e71d8598dbb05b5dee9f452b6332e9e916e (patch) | |
tree | 1e76551ccb51a8eaebf7c643847dd76197aafdcb /manifests/rules/out | |
parent | 591b48169ba18c8f9d8337aa2626d716e6866476 (diff) |
make it possibble to disable ipv6 for these rules
Diffstat (limited to 'manifests/rules/out')
-rw-r--r-- | manifests/rules/out/puppet.pp | 21 |
1 files changed, 12 insertions, 9 deletions
diff --git a/manifests/rules/out/puppet.pp b/manifests/rules/out/puppet.pp index cbe8cce..827e23a 100644 --- a/manifests/rules/out/puppet.pp +++ b/manifests/rules/out/puppet.pp @@ -1,7 +1,9 @@ +# outgoing puppet traffic class shorewall::rules::out::puppet( - $puppetserver = "puppet.${::domain}", - $puppetserver_port = 8140, - $puppetserver_signport = 8141 + $puppetserver = "puppet.${::domain}", + $puppetserver_port = 8140, + $puppetserver_signport = 8141, + $shorewall6 = true, ) { class{'shorewall::rules::puppet': puppetserver => $puppetserver, @@ -10,11 +12,12 @@ class shorewall::rules::out::puppet( } # we want to connect to the puppet server shorewall::rule { 'me-net-puppet_tcp': - source => '$FW', - destination => 'net:$PUPPETSERVER', - proto => 'tcp', - destinationport => '$PUPPETSERVER_PORT,$PUPPETSERVER_SIGN_PORT', - order => 340, - action => 'ACCEPT'; + source => '$FW', + destination => 'net:$PUPPETSERVER', + proto => 'tcp', + destinationport => '$PUPPETSERVER_PORT,$PUPPETSERVER_SIGN_PORT', + order => 340, + shorewall6 => $shorewall6, + action => 'ACCEPT'; } } |