Dzahn has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/335585 )

Change subject: installserver: add firewall hole for rsync also for IPv6
......................................................................

installserver: add firewall hole for rsync also for IPv6

Just adding the ferm hole for IPv4 is not enough, we also
need to open it for IPv6 which is always preferred when you have
dual-stack.

Bug: T84380
Bug: T132757
Change-Id: I119e5aa83e54b8ed8613505fef3c81fb2d67253a
---
M modules/aptrepo/manifests/rsync.pp
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/85/335585/1

diff --git a/modules/aptrepo/manifests/rsync.pp 
b/modules/aptrepo/manifests/rsync.pp
index 079ab22..c638d81 100644
--- a/modules/aptrepo/manifests/rsync.pp
+++ b/modules/aptrepo/manifests/rsync.pp
@@ -40,7 +40,7 @@
         ensure => $ensure_ferm,
         proto  => 'tcp',
         port   => '873',
-        srange => "@resolve(${primary_server})",
+        srange => "(@resolve((${primary_server})) 
@resolve((${primary_server}), AAAA))",
     }
 
     cron { 'rsync-aptrepo':

-- 
To view, visit https://gerrit.wikimedia.org/r/335585
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I119e5aa83e54b8ed8613505fef3c81fb2d67253a
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to