From a0b9b3542fe9c982d97332017ee15cfc439ebc4c Mon Sep 17 00:00:00 2001 From: Ralph Bean Date: Thu, 7 May 2015 13:13:25 +0000 Subject: [PATCH] Allow retrace nodes to talk to our inbound fedmsg relay. --- inventory/group_vars/proxies | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/inventory/group_vars/proxies b/inventory/group_vars/proxies index c86440a74d..6eb824db06 100644 --- a/inventory/group_vars/proxies +++ b/inventory/group_vars/proxies @@ -56,6 +56,12 @@ custom_rules: [ '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.18 -j ACCEPT', # Also, arm-hub01.qa.fedoraproject.org (secondary arch) '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.31 -j ACCEPT', + + # Allow retrace/faf to talk to the inbound fedmsg relay. + # retrace01.qa.fedoraproject.org + '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.28 -j ACCEPT', + # retrace02.qa.fedoraproject.org + '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.34 -j ACCEPT', ] fas_client_groups: sysadmin-noc,fi-apprentice