Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Move this rule to nat_rules

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-04-13 21:47:45 +02:00
parent cbf5f95037
commit 4ec7e1a547
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/proxies
View file

@ -65,7 +65,9 @@ custom_rules: [
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT', '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT',
# Allow openqa01 to talk to the inbound fedmsg relay. # Allow openqa01 to talk to the inbound fedmsg relay.
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.131.71 -j ACCEPT', '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.131.71 -j ACCEPT',
]
nat_rules: [
# For Zanata, redirect 443/tcp -> 43342/tcp for TLS reasons # For Zanata, redirect 443/tcp -> 43342/tcp for TLS reasons
# See files/httpd/website_id_fp_o_zanata.conf for info # See files/httpd/website_id_fp_o_zanata.conf for info
'-t nat -A PREROUTING -s 209.132.183.252 -p tcp --dport 443 -j REDIRECT --to 44342' '-t nat -A PREROUTING -s 209.132.183.252 -p tcp --dport 443 -j REDIRECT --to 44342'