Kevin Fenzi 55cc28c3b1 base / iptables: Add rules to block staging networks on prod hosts ...

In IAD2 the prod and stg hosts are on different VLANs, so we thought we
didn't need this. However, we are still seeing some odd mixing of prod
and stg fedmsgs, so likely some fedmsg port has become enabled accross
all the VLANS. In any case this should do no harm, it just adds 2
subnets on all prod hosts to block staging, except for a small number of
staging_friendly hosts (in the staging_friendly ansible group).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

2021-03-19 20:08:05 +00:00

..

iptables

base / iptables: Add rules to block staging networks on prod hosts

2021-03-19 20:08:05 +00:00

ifcfg.j2

…

krb5.conf.j2

…

krb5.conf.master.j2

…

setps1.sh.j2

…

system_identification

…