From 542dc9b494931d4e0abd26890b27f34b009f7859 Mon Sep 17 00:00:00 2001 From: Luca Filipozzi Date: Sat, 11 Jan 2014 17:05:21 +0000 Subject: [PATCH] must ACCEPT the connections, silly --- modules/roles/manifests/sip.pp | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/modules/roles/manifests/sip.pp b/modules/roles/manifests/sip.pp index 4133b77c..c04ce5db 100644 --- a/modules/roles/manifests/sip.pp +++ b/modules/roles/manifests/sip.pp @@ -2,21 +2,21 @@ class roles::sip { @ferm::rule { 'sip-ws': domain => 'ip', description => 'SIP over WebSocket (for WebRTC)', - rule => 'proto tcp mod state state (NEW) dport (443)' + rule => 'proto tcp mod state state (NEW) dport (443) ACCEPT' } @ferm::rule { 'sip': domain => 'ip', description => 'SIP connections (TLS)', - rule => 'proto tcp mod state state (NEW) dport (5061)' + rule => 'proto tcp mod state state (NEW) dport (5061) ACCEPT' } @ferm::rule { 'turn': domain => 'ip', description => 'TURN connections (TLS)', - rule => 'proto tcp mod state state (NEW) dport (5349)' + rule => 'proto tcp mod state state (NEW) dport (5349) ACCEPT' } @ferm::rule { 'rtp': domain => 'ip', description => 'RTP streams', - rule => 'proto udp mod state state (NEW) dport (49152:65535)' + rule => 'proto udp mod state state (NEW) dport (49152:65535) ACCEPT' } } -- 2.39.2