}
}
- abel,alwyn: {
+ abel,alwyn,rietz: {
@ferm::rule { "dsa-tftp":
description => "Allow tftp access",
rule => "&SERVICE(udp, 69)"
proto udp dport (53 123) ACCEPT;
proto tcp dport 8140 daddr 82.195.75.104 ACCEPT; # puppethost
proto tcp dport 5140 daddr (82.195.75.98 206.12.19.121) ACCEPT; # loghost
+ proto tcp dport 11371 daddr 82.195.75.107 ACCEPT; # keyring host
proto tcp dport (25 submission) daddr ($HOST_MAILRELAY_V4) ACCEPT
'
}