From 99554d5db8525c0e8267aa991a886b9af5fe5b00 Mon Sep 17 00:00:00 2001
From: Josh Brower <Josh@Defensivedepth.com>
Date: Tue, 22 Feb 2022 14:10:05 -0500
Subject: [PATCH] IDH - UDP vs TCP support

---
 salt/firewall/portgroups.yaml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/salt/firewall/portgroups.yaml b/salt/firewall/portgroups.yaml
index ae258daa6..e928987f7 100644
--- a/salt/firewall/portgroups.yaml
+++ b/salt/firewall/portgroups.yaml
@@ -114,8 +114,13 @@ firewall:
 
 {% if idh_services is defined %}
   {% for service in idh_services %}
+  {% if service in ["smnp","ntp", "tftp"] %}
+    {% set proto = 'udp' %}
+  {% else %}
+    {% set proto = 'tcp' %}
+  {% endif %}
       idh_{{service}}:
-        tcp:
-          - {{ OPENCANARYCONFIG[service~'.port'] }}          
+        {{proto}}:
+          - {{ OPENCANARYCONFIG[service~'.port'] }}
   {% endfor %}
 {% endif %}