#
-# Cookbook Name:: snmpd
+# Cookbook:: snmpd
# Recipe:: default
#
-# Copyright 2013, OpenStreetMap Foundation
+# Copyright:: 2013, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
-# http://www.apache.org/licenses/LICENSE-2.0
+# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
source "snmpd.conf.erb"
owner "root"
group "root"
- mode 0600
+ mode 0o600
variables :communities => communities
notifies :restart, "service[snmpd]"
end
-node[:snmpd][:clients].each do |address|
+if node[:snmpd][:clients]
+ node[:snmpd][:clients].each do |address|
+ firewall_rule "accept-snmp" do
+ action :accept
+ family "inet"
+ source "net:#{address}"
+ dest "fw"
+ proto "udp"
+ dest_ports "snmp"
+ source_ports "1024:"
+ end
+ end
+else
firewall_rule "accept-snmp" do
action :accept
family "inet"
- source "net:#{address}"
+ source "net"
dest "fw"
proto "udp"
dest_ports "snmp"