Try ruling by internal IP here.

This commit is contained in:
Ralph Bean 2015-05-07 13:37:27 +00:00
parent ae7799df88
commit c840126f9a

View file

@ -59,9 +59,9 @@ custom_rules: [
# Allow retrace/faf to talk to the inbound fedmsg relay.
# retrace01.qa.fedoraproject.org
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.28 -j ACCEPT',
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.171 -j ACCEPT',
# retrace02.qa.fedoraproject.org
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.34 -j ACCEPT',
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.172 -j ACCEPT',
]
fas_client_groups: sysadmin-noc,fi-apprentice