diff --git a/inventory/group_vars/autosign b/inventory/group_vars/autosign index 952ddee128..33c3bb978d 100644 --- a/inventory/group_vars/autosign +++ b/inventory/group_vars/autosign @@ -7,6 +7,10 @@ num_cpus: 2 # for systems that do not match the above - specify the same parameter in # the host_vars/$hostname file +# Make connections from signing bridges stateless, they break sigul connections +# https://bugzilla.redhat.com/show_bug.cgi?id=1283364 +custom_rules: ['-A INPUT --proto tcp --sport 44334 --souce sign-bridge01.phx2.fedoraproject.org,secondary-bridge01.qa.fedoraproject.org -j ACCEPT'] + fas_client_groups: sysadmin-releng host_group: autosign