Allow snmp to necrosan

[chef.git] / roles / milkywan.rb

diff --git a/roles/milkywan.rb b/roles/milkywan.rb
index dbfae9fd5475eda0f5bd106f57286eedeb79aa34..7f00b290f6312c9e62f2243b15ccfe8d65f36c89 100644 (file)
--- a/roles/milkywan.rb
+++ b/roles/milkywan.rb
@@ -10,7 +10,21 @@ default_attributes(
   :hosted_by => "MilkyWan",
   :location => "France",
   :networking => {
-    :nameservers => ["130.117.11.11", "2a0b:cbc0:42::42"],
+    :firewall => {
+      :inet => [
+        {
+          :action => "ACCEPT",
+          :source => "net:212.25.24.64/28",
+          :dest => "fw",
+          :proto => "udp",
+          :dest_ports => "snmp",
+          :source_ports => "1024:",
+          :rate_limit => "-",
+          :connection_limit => "-"
+        }
+      ]
+    },
+    :nameservers => ["8.8.8.8", "2a0b:cbc0:42::42"],
     :roles => {
       :external => {
         :zone => "osm"