From: Peter Palfrader Date: Sat, 14 Apr 2012 16:18:15 +0000 (+0200) Subject: Allow br1 stuff on luchesi X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;ds=sidebyside;h=1eed6c206bf73140deaa4d931f6b54d528636e8d;p=dsa-puppet.git Allow br1 stuff on luchesi --- diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index 53faf51a..65b056d8 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -202,6 +202,7 @@ def $FREEBSD_HOSTS=($ADDRESS_FANO $ADDRESS_FINZI); policy ACCEPT; mod state state (ESTABLISHED RELATED) ACCEPT; interface br0 outerface br0 ACCEPT; +interface br1 outerface br1 ACCEPT; interface br2 outerface br0 jump from-kfreebsd; interface br0 destination ($FREEBSD_HOSTS) jump to-kfreebsd;