allow postgres on danzi

[dsa-puppet.git] / modules / ferm / manifests / per-host.pp

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 72f8894eafdd4f1e1cd94ab5744f0e6865d1bce0..28250d0304503a906b5ba643ddd976a960d3f636 100644 (file)
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -24,6 +24,13 @@ class ferm::per-host {
                 rule         => "&SERVICE_RANGE(tcp, http-alt, ( 192.25.206.16 70.103.162.29 217.196.43.134 ))"
             }
         }
+       danzi: {
+            @ferm::rule { "dsa-postgres-danzi":
+                description     => "Allow postgress access",
+                rule            => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))"
+            }
+
+       }
         paganini: {
             @ferm::rule { "dsa-dhcp":
                 description     => "Allow dhcp access",