WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-29 04:51:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

Allow ntp from internal phx2 10 nets to bastion servers.

Browse Source
This commit is contained in:
Kevin Fenzi
2015-12-08 19:30:30 +00:00
parent 9511bfe231
commit 4e49aac830
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
inventory/group_vars/bastion
View File

@@ -12,9 +12,11 @@ udp_ports: [ 1194 ]
#
# drop incoming traffic from less trusted vpn hosts
# allow ntp from internal phx2 10 nets
#
custom_rules: [
'-A INPUT -s 192.168.100/24 -j REJECT --reject-with icmp-host-prohibited',
'-A INPUT -s 10.0.0.0/8 -p udp -m udp --dport 123 -j ACCEPT',
]
#
# allow a bunch of sysadmin groups here so they can access internal stuff