From ac7831af052e807cae7aa0913005d5bb13ecb0af Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 24 Apr 2010 17:01:00 +0200
Subject: [PATCH] Try to allow merikanto to mount beethoven's nfs

---
 manifests/site.pp | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifests/site.pp b/manifests/site.pp
index 04bf3ba7..a5d96b4d 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -146,6 +146,12 @@ node default {
 		    rule            => "&SERVICE_RANGE(tcp, 8140, \$HOST_DEBIAN_V6)"
 	   }
         }
+	beethoven: {
+	   @ferm::rule { "dsa-merikanto-beethoven":
+		    description     => "Allow merikanto",  # for nfs, and that uses all kind of ports by default.
+		    rule            => "source 172.22.127.147 interface bond0 jump ACCEPT",
+	   }
+	}
 
     }
     case $brokenhosts {
-- 
2.39.2