keith/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FreeSwitch, make use of the mncc_ip_address variable

Browse source
This commit is contained in:
Monocots 2019-08-10 07:11:27 +00:00
parent 32256fb66f
commit b179f58489
5 changed files with 21 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

38
modules/rhizo_base/templates/acl.conf.xml.erb Normal file
View file

@ -0,0 +1,38 @@
<configuration name="acl.conf" description="Network Lists">
<network-lists>
<!--
These ACL's are automatically created on startup.
rfc1918.auto - RFC1918 Space
nat.auto - RFC1918 Excluding your local lan.
localnet.auto - ACL for your local lan.
loopback.auto - ACL for your local lan.
-->
<list name="lan" default="allow">
<node type="deny" cidr="192.168.42.0/24"/>
<node type="allow" cidr="192.168.42.42/32"/>
</list>
<!--
This will traverse the directory adding all users
with the cidr= tag to this ACL, when this ACL matches
the users variables and params apply as if they
digest authenticated.
-->
<list name="domains" default="deny">
<!-- domain= is special it scans the domain from the directory to build the ACL -->
<!--<node type="allow" domain="$${domain}"/> -->
<node type="allow" cidr="192.168.11.0/24"/>
<node type="allow" cidr="10.23.0.0/16"/>
<node type="allow" cidr="<%= @mncc_ip_address %>/32"/>
<node type="allow" cidr="127.0.0.1/32"/>
<!-- use cidr= if you wish to allow ip ranges to this domains acl. -->
<!-- <node type="allow" cidr="192.168.0.0/24"/> -->
</list>
</network-lists>
</configuration>