Signed-off-by: Stephen Gran <steve@lobefin.net>
path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
refreshonly => true,
}
path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
refreshonly => true,
}
- @ferm::rule { "dsa-munin-v4"
+ @ferm::rule { "dsa-munin-v4":
description => "Allow munin from munin master",
rule => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN_V4) ACCEPT; }"
}
description => "Allow munin from munin master",
rule => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN_V4) ACCEPT; }"
}
- @ferm::rule { "dsa-munin-v4"
+ @ferm::rule { "dsa-munin-v6":
description => "Allow munin from munin master",
domain => "ip6",
rule => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN_V6) ACCEPT; }"
description => "Allow munin from munin master",
domain => "ip6",
rule => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN_V6) ACCEPT; }"