From 207faba0fccd61d16ab67dbca95aba9f876ed869 Mon Sep 17 00:00:00 2001 From: Valentin Gologuzov Date: Thu, 22 Jan 2015 20:36:45 +0100 Subject: [PATCH] [copr] [prod] close access to keygen on 80 port, allow connections only from copr-be-dev.cloud --- inventory/group_vars/copr-keygen | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/inventory/group_vars/copr-keygen b/inventory/group_vars/copr-keygen index 2a8d837c0c..bd91e73375 100644 --- a/inventory/group_vars/copr-keygen +++ b/inventory/group_vars/copr-keygen @@ -1,2 +1,4 @@ --- -tcp_ports: [22, 80, 5167] +tcp_ports: [22, 5167] + +custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.16.5.4 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s '209.132.184.142' --dport 80 -j ACCEPT']