Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Friends.

Browse source
This commit is contained in:
Ralph Bean 2016-03-10 18:28:18 +00:00
parent 99366b1b14
commit 4fd88f61f4
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/base/templates/iptables/iptables
View file

@ -24,6 +24,12 @@
-A INPUT -p tcp -m tcp --dport 5666 -s 209.132.181.35 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 209.132.181.35 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.41 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.41 -j ACCEPT
{% if inventory_hostname in groups['proxies'] %}
{% for friend in friends %}
-A INPUT --src {{ friend }} -j DROP
{% endfor %}
{% endif %}
{% if env != 'staging' and datacenter == 'phx2' and inventory_hostname not in groups['staging-friendly'] %} {% if env != 'staging' and datacenter == 'phx2' and inventory_hostname not in groups['staging-friendly'] %}
# #
# In the phx2 datacenter, both production and staging hosts are in the same # In the phx2 datacenter, both production and staging hosts are in the same