sunet-cert/soc-ops
0
0
Fork 0
Code Pull requests Activity

Use nftables in rsyslog.

Browse source
This commit is contained in:
Johan Björklund 2025-02-20 13:51:04 +01:00
parent a80d15cf51
commit ab5fd41c43
Signed by: bjorklund
GPG key ID: 5E8401339C7F5037
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
global/overlay/etc/puppet/modules/soc/manifests/rsyslog.pp
View file

@ -60,7 +60,7 @@ class soc::rsyslog(
if ($tcp_port or $udp_port) { if ($tcp_port or $udp_port) {
if ($udp_port) { if ($udp_port) {
sunet::nft::allow { "allow-syslog-udp-${udp_port}": sunet::nftables::allow { "allow-syslog-udp-${udp_port}":
from => $udp_client, from => $udp_client,
ip => 'any', ip => 'any',
proto => 'udp', proto => 'udp',
@ -69,7 +69,7 @@ class soc::rsyslog(
} }
if ($tcp_port) { if ($tcp_port) {
sunet::nft::allow { "allow-syslog-tcp-${tcp_port}": sunet::nftables::allow { "allow-syslog-tcp-${tcp_port}":
from => $tcp_client, from => $tcp_client,
ip => 'any', ip => 'any',
proto => 'tcp', proto => 'tcp',