From 9b39294f002c9c0aabe34e574c828cf7a4e6d17c Mon Sep 17 00:00:00 2001 From: mh Date: Mon, 28 Sep 2009 21:47:41 +0200 Subject: set the rules according to sysconfig --- manifests/rules/nfsd.pp | 40 ++++++++++++++++++++++++++++------------ 1 file changed, 28 insertions(+), 12 deletions(-) diff --git a/manifests/rules/nfsd.pp b/manifests/rules/nfsd.pp index 2719a29..23ed33c 100644 --- a/manifests/rules/nfsd.pp +++ b/manifests/rules/nfsd.pp @@ -15,35 +15,35 @@ class shorewall::rules::nfsd { order => 240, action => 'ACCEPT'; } - shorewall::rule { 'net-me-rpc.nfsd-tcp': + shorewall::rule { 'net-me-rpc.statd-tcp': source => 'net', destination => '$FW', proto => 'tcp', - destinationport => '2049', + destinationport => '662', order => 240, action => 'ACCEPT'; } - shorewall::rule { 'net-me-rpc.nfsd-udp': + shorewall::rule { 'net-me-rpc.statd-udp': source => 'net', destination => '$FW', proto => 'udp', - destinationport => '2049', + destinationport => '662', order => 240, action => 'ACCEPT'; } - shorewall::rule { 'net-me-rpc.statd-tcp': + shorewall::rule { 'me-net-rpc.statd-tcp': source => 'net', destination => '$FW', proto => 'tcp', - destinationport => '4000', + destinationport => '2020', order => 240, action => 'ACCEPT'; } - shorewall::rule { 'net-me-rpc.statd-udp': + shorewall::rule { 'me-net-rpc.statd-udp': source => 'net', destination => '$FW', proto => 'udp', - destinationport => '4000', + destinationport => '2020', order => 240, action => 'ACCEPT'; } @@ -51,7 +51,7 @@ class shorewall::rules::nfsd { source => 'net', destination => '$FW', proto => 'tcp', - destinationport => '4001', + destinationport => '32803', order => 240, action => 'ACCEPT'; } @@ -59,7 +59,7 @@ class shorewall::rules::nfsd { source => 'net', destination => '$FW', proto => 'udp', - destinationport => '4001', + destinationport => '32769', order => 240, action => 'ACCEPT'; } @@ -67,7 +67,7 @@ class shorewall::rules::nfsd { source => 'net', destination => '$FW', proto => 'tcp', - destinationport => '4002', + destinationport => '892', order => 240, action => 'ACCEPT'; } @@ -75,7 +75,23 @@ class shorewall::rules::nfsd { source => 'net', destination => '$FW', proto => 'udp', - destinationport => '4002', + destinationport => '892', + order => 240, + action => 'ACCEPT'; + } + shorewall::rule { 'net-me-rpc.rquotad-tcp': + source => 'net', + destination => '$FW', + proto => 'tcp', + destinationport => '875', + order => 240, + action => 'ACCEPT'; + } + shorewall::rule { 'net-me-rpc.rquoata-udp': + source => 'net', + destination => '$FW', + proto => 'udp', + destinationport => '875', order => 240, action => 'ACCEPT'; } -- cgit v1.2.3