The Internet seems to think I should do this.

This commit is contained in:
Ralph Bean 2014-08-18 16:05:44 +00:00
parent b547198a95
commit 056d0f22f9

View file

@ -33,7 +33,7 @@
# ban staging from non-staging hosts
{% if env != 'staging' %}
{% for host in groups['staging'] %}
-A INPUT -s {{ hostvars[host]['eth0_ip'] }} -j REJECT --reject-with icmp-host-prohibited
-A INPUT -s {{ hostvars[host]['ansible_eth0']['ipv4']['address'] }} -j REJECT --reject-with icmp-host-prohibited
{% endfor %}
{% endif %}