Dzahn has uploaded a new change for review. https://gerrit.wikimedia.org/r/316030
Change subject: tcpircbot: update IPv6 addresses for terbium and wasat ...................................................................... tcpircbot: update IPv6 addresses for terbium and wasat We had to add IPv6 addresses to let maintenance hosts talk to talk to logmsgbot in I94169ff5efb3a0a6ba7 but they were not mapped addresses. The maintenance servers, terbium and wasat then received mapped IPv6 addresses in I84b34ea447e8136c25. I alread updated them in Id6f4f45cd14040cdbb86c but did not change them in this section as well. The missing DNS records these comments refer to will be added in Icc635e6e50fbd7e1b6. Change-Id: Ic7bf1903f8a04649ea7ec9fd7413c01f787006f7 --- M manifests/role/tcpircbot.pp 1 file changed, 2 insertions(+), 2 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/30/316030/1 diff --git a/manifests/role/tcpircbot.pp b/manifests/role/tcpircbot.pp index fbc6a1e..b7a7cc2 100644 --- a/manifests/role/tcpircbot.pp +++ b/manifests/role/tcpircbot.pp @@ -34,8 +34,8 @@ } ferm::rule { 'tcpircbot_allowed': - # eventlog1001 (v4), tin (v4), mira (v4), puppetmaster1001 (v4), tin (v6), mira (v6), puppetmaster1001 (v6, unnamed in DNS), terbium (v4), terbium (v6, unnamed in DNS), wasat (v4), wasat (v6, unnamed in DNS), puppetmaster2001 (v4), puppetmaster2001 (v6, unnamed in DNS) + # eventlog1001 (v4), tin (v4), mira (v4), puppetmaster1001 (v4), tin (v6), mira (v6), puppetmaster1001 (v6, unnamed in DNS), terbium (v4), terbium (v6), wasat (v4), wasat (v6), puppetmaster2001 (v4), puppetmaster2001 (v6, unnamed in DNS) # Please DO NOT change the IPs in the rule below without updating the comment above - rule => 'proto tcp dport 9200 { saddr (10.64.32.167/32 10.64.0.196/32 10.192.16.132/32 10.64.16.73/32 2620:0:861:101:10:64:0:196/128 2620:0:860:102:10:192:16:132/128 2620:0:861:102:10:64:16:73/128 10.64.32.13/32 2620:0:861:103:92b1:1cff:fe25:9d72/128 10.192.48.45/32 2620:0:860:104:1602:ecff:fe3f:478c/128 10.192.0.27/32 2620:0:860:101:10:192:0:27/128) ACCEPT; }', + rule => 'proto tcp dport 9200 { saddr (10.64.32.167/32 10.64.0.196/32 10.192.16.132/32 10.64.16.73/32 2620:0:861:101:10:64:0:196/128 2620:0:860:102:10:192:16:132/128 2620:0:861:102:10:64:16:73/128 10.64.32.13/32 2620:0:861:103:10:64:32:13/64 10.192.48.45/32 2620:0:860:104:10:192:48:45/64 10.192.0.27/32 2620:0:860:101:10:192:0:27/128) ACCEPT; }', } } -- To view, visit https://gerrit.wikimedia.org/r/316030 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Ic7bf1903f8a04649ea7ec9fd7413c01f787006f7 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Dzahn <dz...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits