fixes for the firewall setup

afortiorama · Aug 15, 2013 · fd39c91 · fd39c91
1 parent c1335ae
commit fd39c91
Showing 1 changed file with 14 additions and 3 deletions.
diff --git a/manifests/firewall.pp b/manifests/firewall.pp
@@ -3,14 +3,25 @@
 # Defines firewall rules for the HTCondor server (CE)
 #
 class htcondor::firewall (
-  $worker_nodes_network = '127.0.0.1/32') {
+  $worker_nodes_network = '127.0.0.1') {
   firewall { '200 Allow worker nodes to contact server':
     action => 'accept',
     source => $worker_nodes_network,
-    proto  => 'all',
+    proto  => 'tcp',
     state  => [
       'ESTABLISHED',
       'NEW'],
-    dport  => '9000-1000',
+    dport  => '9000-10000',
   }
+
+  firewall { '201 Allow worker nodes to contact server':
+    action => 'accept',
+    source => $worker_nodes_network,
+    proto  => 'tcp',
+    state  => [
+      'ESTABLISHED',
+      'NEW'],
+    dport  => '9000-10000',
+  }
+
 }