WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-26 11:36:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

and put in items for the rules

Browse Source
This commit is contained in:
Stephen Smoogen
2016-03-18 20:36:52 +00:00
parent 1da4475134
commit 07623cfffa
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
inventory/group_vars/download-phx2
View File

@@ -8,4 +8,5 @@ nrpe_procs_crit: 1000
# nfs mount options, overrides the all/default
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,actimeo=600,nfsvers=3"
custom_rules: [ '-A INPUT -s 143.106.60.118 -j DROP', '-A INPUT -s 143.106.60.112 -j DROP', '-A INPUT -s 169.53.165.245 -j DROP', '-A INPUT -s 46.29.92.6 -j DROP', '-A INPUT -s 198.11.167.9 -j DROP', '-A INPUT -s 103.193.116.147 -j DROP', '-A INPUT -s 69.47.68.211 -j DROP' ]
blocked_ips: ['143.106.60.118', '143.106.60.112', '169.53.165.245', '46.29.92.6', '198.11.167.9', '103.193.116.147', '69.47.68.211']

6
roles/base/templates/iptables/iptables.download-phx2
View File

@@ -80,9 +80,9 @@
{% endfor %}
{% endif %}
# if the block_hosts is defined - drop them
{% if block_hosts is defined %}
{% for ip in block_hosts %}
# if the blocked_ips is defined - drop them
{% if blocked_ips is defined %}
{% for ip in blocked_ips %}
-A INPUT -s {{ ip }} -j DROP
{% endfor %}
{% endif %}