Hi, We're not using passenger. It's working, but not quite what you would call stable, still see this in the logs sometimes - Feb 11 11:22:26 xxxxxxx01 puppet-agent[2135]: (/Firewall[030 ALL - ACCEPT all to localhost]/ensure) created
Feb 11 11:22:26 xxxxxxx01 puppet-agent[2135]: (/Firewall[010 ALL - ACCEPT RELATED and ESTABLISHED]/ensure) created Feb 11 11:22:27 xxxxxxx01 puppet-agent[2135]: (/Firewall[211 TCP - Accept SSH from yyyyyyy01]/ensure) created Feb 11 11:22:28 xxxxxxx01 puppet-agent[2135]: (/Firewall[213 ALL - ACCEPT all to P2P3 (HeartBeat Link)]/ensure) created Feb 11 11:22:28 xxxxxxx01 puppet-agent[2135]: (/Firewall[216 ALL - ACCEPT AFD monitoring from xxxxxxx on management]/ensure) created Feb 11 11:22:29 xxxxxxx01 puppet-agent[2135]: (/Firewall[020 UDP - DROP NetBIOS Traffic]/ensure) created Feb 11 11:22:29 xxxxxxx01 puppet-agent[2135]: (/Firewall[990 ALL - JUMP to LOG CHAIN]/ensure) created Feb 11 11:22:30 xxxxxxx01 puppet-agent[2135]: (/Firewall[991 ALL - DROP ALL]/ensure) created Feb 11 11:22:30 xxxxxxx01 puppet-agent[2135]: (/Firewall[217 ALL - ACCEPT AFD monitoring from xxxxxxx2 on management]/ensure) created Feb 11 11:22:31 xxxxxxx01 puppet-agent[2135]: (/Firewall[218 ALL - ACCEPT AFD monitoring from xxxxxxx01 on management]/ensure) created Feb 11 11:22:32 xxxxxxx01 puppet-agent[2135]: (/Firewall[215 ALL - ACCEPT FTP on BOND0 (Data Link)]/ensure) created Feb 11 11:22:44 xxxxxxx01 puppet-agent[2135]: (/Firewall[214 ALL - ACCEPT all to BOND1 (DRDB Link)]/ensure) created Feb 11 11:22:46 xxxxxxx01 puppet-agent[2135]: (/Firewall[210 TCP - Accept SSH from zzzzzz01]/ensure) created Feb 11 11:22:47 xxxxxxx01 puppet-agent[2135]: Finished catalog run in 27.28 seconds but at least they aren't being removed :-) We do plan to move to a newer version when we have time, but it's on a pretty long list of to do's. Cheers Chris On Wednesday, 12 February 2014 15:24:05 UTC, Felix.Frank wrote: > > Hi, > > the manifest layout sounds sane enough. Is this a passenger setup? > > On 02/12/2014 03:56 PM, Chris W wrote: > > Puppet master is 3.0.2 > > Puppet agent is 3.0.2I ended up having to do an include of the > > /service/::firewall from the node manifest > > So is this working for you now? > > If not, I seem to remember that 3.0.x had certain issues, not sure if > this kind of craziness was among them. > > Can you try upgrading to 3.2 or later? > > Cheers, > Felix > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/9a21312a-df66-40a4-88bd-a69c9b1a23dc%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.