stop including ferm for now

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/manifests/site.pp b/manifests/site.pp
index b10857915f571391132bd8e4b80fc6636d571344..2bc7939d85725c303ed55b4b841fc6630b9999cb 100644 (file)
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -84,7 +84,4 @@ node default {
     case $hoster {
         "ubcece", "darmstadt", "ftcollins", "grnet":  { include resolv }
     }
-    case $hostname {
-       brahms: { include ferm }
-    }
 }

diff --git a/modules/munin-node/manifests/init.pp b/modules/munin-node/manifests/init.pp
index 79eaa6265363b7799aebff7ed969ffa04088ca1b..29bef07fef85f8b3fae7be4f6dcf80cc72a70ca4 100644 (file)
--- a/modules/munin-node/manifests/init.pp
+++ b/modules/munin-node/manifests/init.pp
@@ -75,10 +75,5 @@ class munin-node {
         path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
         refreshonly => true,
     }
-    ferm::rule { "dsa-munin":
-        description     => "Allow munin-node from spohr.debian.org",
-        rule            => 'proto tcp dport 4949 saddr $HOST_MUNIN ACCEPT',
-       prio            => "02"
-   }
 }
 

diff --git a/modules/nagios/manifests/init.pp b/modules/nagios/manifests/init.pp
index 70e08658a8b0495957c0e84a4772eef156f8bbc0..13c0dc911bf2a7b4aed742776bfd5941adee7151 100644 (file)
--- a/modules/nagios/manifests/init.pp
+++ b/modules/nagios/manifests/init.pp
@@ -2,9 +2,4 @@ class nagios {
        package {
                nagios-nrpe-server: ensure => installed;
        }
-       ferm::rule { "dsa-nagios":
-               description     => "Allow nrpe from spohr.debian.org",
-               rule            => 'proto tcp dport 5666 saddr $HOST_NAGIOS ACCEPT',
-               prio            => "03"
-       }
 }

diff --git a/modules/ssh/manifests/init.pp b/modules/ssh/manifests/init.pp
index b3e32e34c57ec9470c7857131664b4356c8f16e9..9b253832cfbcf43e771c0b3e5749839b25c08c2a 100644 (file)
--- a/modules/ssh/manifests/init.pp
+++ b/modules/ssh/manifests/init.pp
@@ -37,11 +37,5 @@ class ssh {
             path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
             refreshonly => true,
         }
-        ferm::rule { "dsa-ssh":
-               description     => "Allow SSH",
-               rule            => "proto tcp dport ssh ACCEPT",
-               domain          => "(ip ip6)",
-               prio            => "01"
-        }
 
 }