From: Martin Zobel-Helas <zobel@debian.org>
Date: Fri, 11 Jul 2014 20:42:58 +0000 (+0200)
Subject: allow mfl to access adayevskaya via ssh
X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=commitdiff_plain;h=8e8a82b008d3b5845fb96f4e87d9417556b4cf7f

allow mfl to access adayevskaya via ssh

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index 17b16070..ef5e6a44 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -10,6 +10,14 @@ class ferm::per-host {
 			rule        => '&SERVICE(tcp, 873)'
 		}
 	}
+	case $::hostname {
+		adayevskaya: {
+			@ferm::rule { 'dsa-iscsi':
+				description     => 'Allow mfl (local admin) access',
+				rule            => '&SERVICE_RANGE(tcp, 22, ( 130.83.226.60/32 ))'
+			}
+		}
+	}
 
 	case $::hostname {
 		bm-bl9: {