Friends.

roles/base/templates/iptables/iptables

@@ -24,6 +24,12 @@
 -A INPUT -p tcp -m tcp --dport 5666  -s 209.132.181.35 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.41 -j ACCEPT
 
+{% if inventory_hostname in groups['proxies'] %}
+{% for friend in friends %}
+-A INPUT --src {{ friend }} -j DROP
+{% endfor %}
+{% endif %}
+
 {% if env != 'staging' and datacenter == 'phx2' and inventory_hostname not in groups['staging-friendly'] %}
 #
 # In the phx2 datacenter, both production and staging hosts are in the same