base / iptables / koji_builder: The s390x hosts need to talk to kojipkgs01/02

Actually it's only the varnish caching host that needs to talk to them
at this point, but might as well allow it on any of them in case we
switch how the caching works there or the like.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/base/templates/iptables/iptables.kojibuilder

@@ -30,6 +30,8 @@
 # kojipkgs
 {% if host in groups['buildvm_s390x'] %}
 -A OUTPUT -p tcp -m tcp -d 10.16.0.17 --dport 80 -j ACCEPT
+-A OUTPUT -p tcp -m tcp -d 10.3.169.106 --dport 80 -j ACCEPT
+-A OUTPUT -p tcp -m tcp -d 10.3.169.107 --dport 80 -j ACCEPT
 {% endif %}
 
 # tang for buildhw