From 8aa9460c4f37da95c931dd25eb2b3ab0512f6afd Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sat, 6 Mar 2010 12:50:48 +0000 Subject: [PATCH] first stab at opening firewall for actual mail port Signed-off-by: Stephen Gran --- modules/exim/manifests/init.pp | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/modules/exim/manifests/init.pp b/modules/exim/manifests/init.pp index 956cdc09..f245eab1 100644 --- a/modules/exim/manifests/init.pp +++ b/modules/exim/manifests/init.pp @@ -156,14 +156,15 @@ class exim { path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", refreshonly => true, } + $mail_port = case extractnodeinfo($nodeinfo, 'mail_port') @ferm::rule { "dsa-exim": description => "Allow SMTP", - rule => "&SERVICE_RANGE(tcp, smtp, \$SMTP_SOURCES)" + rule => "&SERVICE_RANGE(tcp, $mail_port, \$SMTP_SOURCES)" } @ferm::rule { "dsa-exim-v6": description => "Allow SMTP", domain => "ip6", - rule => "&SERVICE_RANGE(tcp, smtp, \$SMTP_V6_SOURCES)" + rule => "&SERVICE_RANGE(tcp, $mail_port, \$SMTP_V6_SOURCES)" } # Do we actually want this? I'm only doing it because it's harmless # and makes the logs quiet. There are better ways of making logs quiet, -- 2.39.2