Allow retrace nodes to talk to our inbound fedmsg relay.

This commit is contained in:
Ralph Bean 2015-05-07 13:13:25 +00:00
parent 41e821f9f7
commit a0b9b3542f

View file

@ -56,6 +56,12 @@ custom_rules: [
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.18 -j ACCEPT',
# Also, arm-hub01.qa.fedoraproject.org (secondary arch)
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.31 -j ACCEPT',
# Allow retrace/faf to talk to the inbound fedmsg relay.
# retrace01.qa.fedoraproject.org
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.28 -j ACCEPT',
# retrace02.qa.fedoraproject.org
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.34 -j ACCEPT',
]
fas_client_groups: sysadmin-noc,fi-apprentice