sunet-cert/soc-ops
0
0
Fork 0
Code Pull requests Activity

Fixes for nftables in rsyslog.

Browse source
This commit is contained in:
Johan Björklund 2025-02-20 13:52:13 +01:00
parent ab5fd41c43
commit 997001e539
Signed by: bjorklund
GPG key ID: 5E8401339C7F5037
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
global/overlay/etc/puppet/modules/soc/manifests/rsyslog.pp
View file

@ -62,7 +62,7 @@ class soc::rsyslog(
if ($udp_port) { if ($udp_port) {
sunet::nftables::allow { "allow-syslog-udp-${udp_port}": sunet::nftables::allow { "allow-syslog-udp-${udp_port}":
from => $udp_client, from => $udp_client,
ip => 'any', to => 'any',
proto => 'udp', proto => 'udp',
port => $udp_port port => $udp_port
} }
@ -71,7 +71,7 @@ class soc::rsyslog(
if ($tcp_port) { if ($tcp_port) {
sunet::nftables::allow { "allow-syslog-tcp-${tcp_port}": sunet::nftables::allow { "allow-syslog-tcp-${tcp_port}":
from => $tcp_client, from => $tcp_client,
ip => 'any', to => 'any',
proto => 'tcp', proto => 'tcp',
port => $tcp_port port => $tcp_port
} }