Port custom firewall rule to nftables

[chef.git] / cookbooks / bind / templates / default / named.options.erb

diff --git a/cookbooks/bind/templates/default/named.options.erb b/cookbooks/bind/templates/default/named.options.erb
index a2bd23dbb9f43374adb4d4286dfc268db0329caa..2ec4094dc8bb65d12e3b0924fff3af9c65872a24 100644 (file)
--- a/cookbooks/bind/templates/default/named.options.erb
+++ b/cookbooks/bind/templates/default/named.options.erb
@@ -3,12 +3,18 @@
 acl "osm" {
        127.0.0.1/32;
 <% node.interfaces(:family => :inet).each do |interface| -%>
-       <%= interface[:network] %>/<%= interface[:prefix] %>;
+        <%= interface[:network] %>/<%= interface[:prefix] %>;
+<% end -%>
+<% @ipv4_clients.sort.each do |address| -%>
+       <%= address %>/32;
 <% end -%>
 
        ::1/128;
 <% node.interfaces(:family => :inet6).each do |interface| -%>
-       <%= interface[:network] %>/<%= interface[:prefix] %>;
+        <%= interface[:network] %>/<%= interface[:prefix] %>;
+<% end -%>
+<% @ipv6_clients.sort.each do |address| -%>
+       <%= address %>/128;
 <% end -%>
 };