apply fixes from Patrick for OSBS node dnsmasq and proxy iptables

Signed-off-by: Adam Miller <admiller@redhat.com>
This commit is contained in:
Adam Miller 2016-11-08 23:38:25 +00:00
parent 7f01af8a88
commit 059337652b
3 changed files with 18 additions and 0 deletions

View file

@ -0,0 +1,2 @@
server=/fedoraproject.org/10.5.126.21
server=/fedoraproject.org/10.5.126.22

View file

@ -67,5 +67,9 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.97 --dport 443 -j ACCEPT
iptables -A FILTER_FORWARD -p udp -m udp -d 8.8.8.8 --dport 53 -j ACCEPT
iptables -A FILTER_FORWARD -p udp -m udp -d 8.8.4.4 --dport 53 -j ACCEPT
# proxy
iptables -A FILTER_FORWARD -p tcp --dst 10.5.126.88 --dport 443 -j ACCEPT
iptables -A FILTER_FORWARD -j REJECT --reject-with icmp-host-prohibited