Drop tcp vs tcp:syn distinction

[chef.git] / cookbooks / munin / recipes / default.rb

diff --git a/cookbooks/munin/recipes/default.rb b/cookbooks/munin/recipes/default.rb
index aad5d40d8dd1b3e95dd0d85bcb92ba37efb28bcb..c1233f9b9203804a9aafa4fe5e3f24a947b4c468 100644 (file)
--- a/cookbooks/munin/recipes/default.rb
+++ b/cookbooks/munin/recipes/default.rb
@@ -31,11 +31,11 @@ servers.each do |server|
     firewall_rule "accept-munin-#{server}" do
       action :accept
       family interface[:family]
-      source "#{interface[:zone]}:#{interface[:address]}"
+      source "net:#{interface[:address]}"
       dest "fw"
-      proto "tcp:syn"
+      proto "tcp"
       dest_ports "munin"
-      source_ports "1024:"
+      source_ports "1024-65535"
     end
   end
 end