Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Switch this over to two ip's instead of a hostname so iptables will start on boot.

Browse source
This commit is contained in:
Kevin Fenzi 2016-03-02 16:27:30 +00:00
parent 35824c1ad4
commit 3382864cee
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/base/templates/iptables/iptables.kojibuilder
View file

@ -73,9 +73,11 @@
-A OUTPUT -m tcp -p tcp --dport 9418 -d 140.211.169.199 -j ACCEPT
-A OUTPUT -m udp -p udp --dport 9418 -d 140.211.169.199 -j ACCEPT
# admin.fedoraproject.org for fas
-A OUTPUT -p tcp -m tcp -d admin.fedoraproject.org --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d admin.fedoraproject.org --dport 443 -j ACCEPT
# admin.fedoraproject.org for fas (proyx01 and proxy10)
-A OUTPUT -p tcp -m tcp -d 10.5.126.51 --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.126.52 --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT
# for 2 facter auth
-A OUTPUT -p tcp -m tcp -d 10.5.126.30 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.126.25 --dport 8443 -j ACCEPT