WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-30 08:50:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Narrow this forward to only valid ips at site.

Browse Source
This commit is contained in:
Kevin Fenzi
2014-07-05 21:33:31 +00:00
parent 692458e19e
commit 2032b6396a
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/base/templates/iptables/iptables.coloamer
View File

@@ -60,7 +60,8 @@
# otherwise kick everything out
-A INPUT -j REJECT --reject-with icmp-host-prohibited
{% if virthost is defined %}
-A FORWARD -j ACCEPT
-A FORWARD -s 67.203.2.64/29 -j ACCEPT
-A FORWARD -d 67.203.2.64/29 -j ACCEPT
{% else %}
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
{% endif %}