--- Ferm::Rule[mariadb_dba].orig
+++ Ferm::Rule[mariadb_dba]
- domain => (ip ip6)
- ensure => present
- rule => saddr ($MYSQL_ROOT_CLIENTS) proto tcp dport (3307) ACCEPT;
- table => filter
- desc =>
- chain => INPUT
- prio => 10
Ferm::Service[mariadb_dba]
- Parameters differences:
--- Ferm::Service[mariadb_dba].orig
+++ Ferm::Service[mariadb_dba]
+ ensure => present
+ proto => tcp
+ desc =>
+ prio => 10
+ src_sets => ['MYSQL_ROOT_CLIENTS']
+ port => 3307
+ notrack => False
- File[/etc/ferm/conf.d/10_mariadb_dba]
- Content differences:
--- /etc/ferm/conf.d/10_mariadb_dba.orig
+++ /etc/ferm/conf.d/10_mariadb_dba
@@ -1,11 +1,6 @@
# Autogenerated by puppet. DO NOT EDIT BY HAND!
#
-# 10_mariadb_dba:
+#
+&R_SERVICE(tcp, 3307, $MYSQL_ROOT_CLIENTS);
-domain (ip ip6) {
- table filter {
- chain INPUT {
- saddr ($MYSQL_ROOT_CLIENTS) proto tcp dport (3307) ACCEPT;
- }
- }
-}
+
Relevant files