and an rsync rule

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/manifests/site.pp b/manifests/site.pp
index 730a4b92cd4188ccc676db6184048deed604182d..3b384e73fec6a76a591c27e96dff1f5e8aaeb236 100644 (file)
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -156,6 +156,10 @@ node default {
                    description     => "Allow powell to seed BT",
                    rule            => "proto tcp dport 8000:8100 jump ACCEPT"
           }
+           @ferm::rule { "dsa-powell-rsync":
+                    description     => "Hoster wants to sync from here, and why not",
+                    rule            => "&SERVICE_RANGE(tcp, rsync, ( 195.20.242.90 192.25.206.33 82.195.75.106 206.12.19.118 ))"
+           }
        }
        beethoven: {
           @ferm::rule { "dsa-merikanto-beethoven":