From 535eab0ce1b29744da8b828b370771895f4fbadb Mon Sep 17 00:00:00 2001 From: Ralph Bean Date: Wed, 7 Oct 2015 18:06:36 +0000 Subject: [PATCH] Let resultsdb talk to the inbound fedmsg relay (iptables). --- inventory/group_vars/proxies | 3 +++ inventory/group_vars/proxies-stg | 2 ++ 2 files changed, 5 insertions(+) diff --git a/inventory/group_vars/proxies b/inventory/group_vars/proxies index 1a8bb7d63b..5973469f37 100644 --- a/inventory/group_vars/proxies +++ b/inventory/group_vars/proxies @@ -60,6 +60,9 @@ custom_rules: [ '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.172 -j ACCEPT', # Also, s390-hub01.qa.fedoraproject.org (secondary arch) '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.191 -j ACCEPT', + + # Allow resultsdb talk to the inbound fedmsg relay. + '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT', ] fas_client_groups: sysadmin-noc,fi-apprentice diff --git a/inventory/group_vars/proxies-stg b/inventory/group_vars/proxies-stg index 1c6098d464..b3303659c9 100644 --- a/inventory/group_vars/proxies-stg +++ b/inventory/group_vars/proxies-stg @@ -65,6 +65,8 @@ custom_rules: [ # retrace02.qa.fedoraproject.org '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.34 -j ACCEPT', + # Allow resultsdb talk to the inbound fedmsg relay. + '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.147 -j ACCEPT', ] fas_client_groups: sysadmin-noc,fi-apprentice