X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/18e12b0e123fc3e5f344682f884feabc12da0f5a..a76a59954c016d17e803d319d01168e986b8e74a:/cookbooks/snmpd/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/snmpd/recipes/default.rb b/cookbooks/snmpd/recipes/default.rb index fd852357f..b5bccce4b 100644 --- a/cookbooks/snmpd/recipes/default.rb +++ b/cookbooks/snmpd/recipes/default.rb @@ -37,11 +37,23 @@ template "/etc/snmp/snmpd.conf" do notifies :restart, "service[snmpd]" end -node[:snmpd][:clients].each do |address| +if node[:snmpd][:clients] + node[:snmpd][:clients].each do |address| + firewall_rule "accept-snmp" do + action :accept + family "inet" + source "net:#{address}" + dest "fw" + proto "udp" + dest_ports "snmp" + source_ports "1024:" + end + end +else firewall_rule "accept-snmp" do action :accept family "inet" - source "net:#{address}" + source "net" dest "fw" proto "udp" dest_ports "snmp"