Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

bastion: iptables: fix copypasta

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-09-24 10:48:32 -07:00
parent 42cae5591f
commit 06a28bf516
1 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/base/templates/iptables/iptables.bastion
View file

@ -91,12 +91,7 @@
-A INPUT -s 205.139.111.0/24 -m tcp -p tcp --dport 25 -j ACCEPT
-A INPUT -s 216.205.24.0/24 -m tcp -p tcp --dport 25 -j ACCEPT
-A INPUT -s 63.128.21.0/24 -m tcp -p tcp --dport 25 -j ACCEPT
IP Addresses / Network Ranges for Non-SPF Email Traffic
Where messages are being sent from accounts with envelope addresses not registered as internal domains, Mimecast routes through separate ranges.
Region
United States of America (US-Grid) 207.211.30.40 to 207.211.30.49 205.139.111.40 to 205.139.111.49
-A INPUT -s 207.211.30.40/26 -m tcp -p tcp --dport 25 -j ACCEPT
# if the host/group defines incoming tcp_ports - allow them
{% if tcp_ports is defined %}