From 59c1cd6c0b9277c07fb577be0f59ce74154352da Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Sun, 19 Feb 2017 22:56:44 +0100
Subject: no need for openvpn outgoing

---
 manifests/rules/openvpn.pp | 26 ++++++++++----------------
 1 file changed, 10 insertions(+), 16 deletions(-)

diff --git a/manifests/rules/openvpn.pp b/manifests/rules/openvpn.pp
index 55a20d2..842e276 100644
--- a/manifests/rules/openvpn.pp
+++ b/manifests/rules/openvpn.pp
@@ -1,18 +1,12 @@
+# openvpn incoming
 class shorewall::rules::openvpn {
-    shorewall::rule { 'net-me-openvpn-udp':
-        source          => 'net',
-        destination     => '$FW',
-        proto           => 'udp',
-        destinationport => '1194',
-        order           => 240,
-        action          => 'ACCEPT';
-    }
-    shorewall::rule { 'me-net-openvpn-udp':
-        source          => '$FW',
-        destination     => 'net',
-        proto           => 'udp',
-        destinationport => '1194',
-        order           => 240,
-        action          => 'ACCEPT';
-    }
+  shorewall::rule {
+    'net-me-openvpn-udp':
+      source          => 'net',
+      destination     => '$FW',
+      proto           => 'udp',
+      destinationport => '1194',
+      order           => 240,
+      action          => 'ACCEPT';
+  }
 }
-- 
cgit v1.2.3