X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fnagios%2Fmanifests%2Fclient.pp;h=a2482290da7c1ae8386447d752eff09d2a6508e7;hb=215ea6ef7a868fe83c46a02fa84a06e3e2631ed6;hp=97681295cbc3986ae548b7756aa434c9cb57286b;hpb=cd48f056e69f38a8278fceef4a3fa8269eca1c83;p=dsa-puppet.git diff --git a/modules/nagios/manifests/client.pp b/modules/nagios/manifests/client.pp index 97681295..a2482290 100644 --- a/modules/nagios/manifests/client.pp +++ b/modules/nagios/manifests/client.pp @@ -15,13 +15,13 @@ class nagios::client inherits nagios { @ferm::rule { 'dsa-nagios-v4': description => 'Allow nrpe from nagios master', - rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr (\$HOST_NAGIOS_V4) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr ($HOST_NAGIOS_V4) ACCEPT; }', notarule => true, } @ferm::rule { 'dsa-nagios-v6': description => 'Allow nrpe from nagios master', domain => 'ip6', - rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr (\$HOST_NAGIOS_V6) ACCEPT; }', + rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr ($HOST_NAGIOS_V6) ACCEPT; }', notarule => true, }