rule => 'destination 78.8.208.246/32 proto tcp dport 25 jump DROP',
}
}
- abel,alwyn,rietz: {
- @ferm::rule { 'dsa-tftp':
- description => 'Allow tftp access',
- rule => '&SERVICE(udp, 69)'
- }
- }
- paganini: {
- @ferm::rule { 'dsa-dhcp':
- description => 'Allow dhcp access',
- rule => '&SERVICE(udp, 67)'
- }
+ abel,alwyn,rietz,jenkins: {
@ferm::rule { 'dsa-tftp':
description => 'Allow tftp access',
rule => '&SERVICE(udp, 69)'
}
}
+ #paganini: {
+ # @ferm::rule { 'dsa-dhcp':
+ # description => 'Allow dhcp access',
+ # rule => '&SERVICE(udp, 67)'
+ # }
+ # @ferm::rule { 'dsa-tftp':
+ # description => 'Allow tftp access',
+ # rule => '&SERVICE(udp, 69)'
+ # }
+ #}
lotti,lully: {
@ferm::rule { 'dsa-syslog':
description => 'Allow syslog access',
description => 'Allow postgress access1',
rule => '&SERVICE_RANGE(tcp, 5437, ( 2001:41c8:1000:21::21:19/128 ))'
}
+ @ferm::rule { 'dsa-postgres-tracker':
+ # dinis
+ description => 'Allow postgress access for tracker',
+ rule => '&SERVICE_RANGE(tcp, 5438, ( 5.153.231.23/32 ))'
+ }
+ @ferm::rule { 'dsa-postgres-tracker6':
+ domain => 'ip6',
+ description => 'Allow postgress access for tracker1',
+ rule => '&SERVICE_RANGE(tcp, 5438, ( 2001:41c8:1000:21::21:23/128 ))'
+ }
+ @ferm::rule { 'dsa-postgres-tracker-dev':
+ # dinis
+ description => 'Allow postgress access for tracker-dev',
+ rule => '&SERVICE_RANGE(tcp, 5439, ( 5.153.231.23/32 ))'
+ }
+ @ferm::rule { 'dsa-postgres-tracker-dev6':
+ domain => 'ip6',
+ description => 'Allow postgress access for tracker-dev',
+ rule => '&SERVICE_RANGE(tcp, 5439, ( 2001:41c8:1000:21::21:23/128 ))'
+ }
}
danzi: {
@ferm::rule { 'dsa-postgres-danzi':