X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fferm%2Ftemplates%2Finterfaces.conf.erb;h=496054c42de201af4857a70e1bf031adb56711e4;hb=cdf648b13dacc11edd25af11c93a67dbe7097743;hp=82bdb0925a4e6819810409c8043abf1f4435c239;hpb=524df6e01b859446bdc743629e1517eeab889e3c;p=dsa-puppet.git diff --git a/modules/ferm/templates/interfaces.conf.erb b/modules/ferm/templates/interfaces.conf.erb index 82bdb092..496054c4 100644 --- a/modules/ferm/templates/interfaces.conf.erb +++ b/modules/ferm/templates/interfaces.conf.erb @@ -1,4 +1,17 @@ -def $MUNIN_IPS = (<%= v4ips.split(',').join(' ') %>); +def $MUNIN_IPS = (<%= +begin + scope.lookupvar('::v4ips').split(',').join(' ') +rescue + '' +end +%>); +def $MUNIN6_IPS = (<%= +begin + scope.lookupvar('::v6ips') == '' ? '' : scope.lookupvar('::v6ips').split(',').join(' ') +rescue + '' +end +%>); domain ip { chain INPUT { @@ -11,3 +24,15 @@ domain ip { saddr ($MUNIN_IPS) NOP; } } + +domain ip6 { + chain INPUT { + daddr ($MUNIN6_IPS) NOP; + } +} + +domain ip6 { + chain OUTPUT { + saddr ($MUNIN6_IPS) NOP; + } +}