fail open

[dsa-puppet.git] / modules / ferm / templates / me.conf.erb

diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb
index cfb8a3e27f55537da2dd7ca2961370af3be02e19..085704bbbb3e3d91b6b6febfcdebe544a142bcc6 100644 (file)
--- a/modules/ferm/templates/me.conf.erb
+++ b/modules/ferm/templates/me.conf.erb
@@ -4,9 +4,17 @@
 ##
 
 
-@def $SSH_SOURCES = <%
-ssh_allowed = case nodename
-  when 'logtest01' then '0.0.0.0/0'
+@def $SSH_SOURCES = (<%=
+
+sshallowed = []
+
+case hostname
+  when 'logtest01' then sshallowed << [ '91.103.132.25', '91.103.132.49' ]
 end
-ssh_allowed
-%>
+
+if sshallowed.length == 0
+  sshallowed << '0.0.0.0'
+end
+
+sshallowed.join(' ')
+%>);