diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2016-03-23 20:01:11 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2016-03-23 20:01:11 -0300 |
| commit | dffe0d74eadc7c25ab9ee513cb3a6b345dfa7644 (patch) | |
| tree | 53e848d9d576687ec2c032564b6c42ba21b678f1 /manifests/rules/ipsec.pp | |
| parent | 589f5723d500ad7325e19dfeb1d3b8450044acf1 (diff) | |
| parent | edd5db0159d5075609c545fb3ee10727a1cf5271 (diff) | |
| download | puppet-shorewall-master.tar.gz puppet-shorewall-master.tar.bz2 | |
Conflicts:
manifests/tunnel.pp
Diffstat (limited to 'manifests/rules/ipsec.pp')
| -rw-r--r-- | manifests/rules/ipsec.pp | 62 |
1 files changed, 31 insertions, 31 deletions
diff --git a/manifests/rules/ipsec.pp b/manifests/rules/ipsec.pp index 82adff0..413406e 100644 --- a/manifests/rules/ipsec.pp +++ b/manifests/rules/ipsec.pp @@ -1,32 +1,32 @@ -class shorewall::rules::ipsec( - $source = 'net' -) { - shorewall::rule { - 'net-me-ipsec-udp': - source => $shorewall::rules::ipsec::source, - destination => '$FW', - proto => 'udp', - destinationport => '500', - order => 240, - action => 'ACCEPT'; - 'me-net-ipsec-udp': - source => '$FW', - destination => $shorewall::rules::ipsec::source, - proto => 'udp', - destinationport => '500', - order => 240, - action => 'ACCEPT'; - 'net-me-ipsec': - source => $shorewall::rules::ipsec::source, - destination => '$FW', - proto => 'esp', - order => 240, - action => 'ACCEPT'; - 'me-net-ipsec': - source => '$FW', - destination => $shorewall::rules::ipsec::source, - proto => 'esp', - order => 240, - action => 'ACCEPT'; - } +# manage ipsec rules for zone specified in +# $name +define shorewall::rules::ipsec() { + shorewall::rule { + "${name}-me-ipsec-udp": + source => $name, + destination => '$FW', + proto => 'udp', + destinationport => '500', + order => 240, + action => 'ACCEPT'; + "me-${name}-ipsec-udp": + source => '$FW', + destination => $name, + proto => 'udp', + destinationport => '500', + order => 240, + action => 'ACCEPT'; + "${name}-me-ipsec": + source => $name, + destination => '$FW', + proto => 'esp', + order => 240, + action => 'ACCEPT'; + "me-${name}-ipsec": + source => '$FW', + destination => $name, + proto => 'esp', + order => 240, + action => 'ACCEPT'; + } } |