WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-13 15:39:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

mm-frontend-checkin01: add totpci to iptables so sudo will work.

Browse Source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2019-05-09 16:47:49 +00:00
parent 305b40c916
commit 7e18ec152d
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/base/templates/iptables/iptables.mm-frontend-checkin01.phx2.fedoraproject.org
View File

@@ -36,6 +36,11 @@
-A OUTPUT --dst 10.5.126.22 -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT --dst 10.5.126.22 -p tcp -m tcp --dport 53 -j ACCEPT
# Allow totpcgi
-A OUTPUT --dst 10.5.126.25 -p tcp -m tcp --dport 8443 -j ACCEPT
-A OUTPUT --dst 10.5.126.26 -p tcp -m tcp --dport 8443 -j ACCEPT
-A OUTPUT --dst 10.5.126.30 -p tcp -m tcp --dport 8443 -j ACCEPT
# Allow infrastructure.fp.o http and https
-A OUTPUT --dst 10.5.126.23 -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT --dst 10.5.126.23 -p tcp -m tcp --dport 443 -j ACCEPT