From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 24 Apr 2010 15:01:00 +0000 (+0200)
Subject: Try to allow merikanto to mount beethoven's nfs
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=ac7831af052e807cae7aa0913005d5bb13ecb0af;p=dsa-puppet.git

Try to allow merikanto to mount beethoven's nfs
---

diff --git a/manifests/site.pp b/manifests/site.pp
index 04bf3ba7..a5d96b4d 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -146,6 +146,12 @@ node default {
 		    rule            => "&SERVICE_RANGE(tcp, 8140, \$HOST_DEBIAN_V6)"
 	   }
         }
+	beethoven: {
+	   @ferm::rule { "dsa-merikanto-beethoven":
+		    description     => "Allow merikanto",  # for nfs, and that uses all kind of ports by default.
+		    rule            => "source 172.22.127.147 interface bond0 jump ACCEPT",
+	   }
+	}
 
     }
     case $brokenhosts {