- if %w{lebrun schroeder}.include?(hostname) then
- out << '@def $CARNET = ( 193.198.184.8/29 161.53.160.133 161.53.160.90 161.53.11.222 161.53.12.134 161.53.12.142 161.53.12.143 );'
- ssh4allowed << '$CARNET'
- ssh4allowed << '$BUILDD_SSH_ACCESS'
- end
- if %w{beethoven draghi}.include?(hostname) then
- ssh4allowed << '$HOST_DEBIAN_V4'
- ssh6allowed << '$HOST_DEBIAN_V6'
- end
- if %w{unger}.include?(hostname) then
- ssh4allowed << '$UNGER_SSH_ACCESS' # Ganneff
- ssh6allowed << '$UNGER_SSH6_ACCESS' # Ganneff, but more address space
+if should_restrict then
+ # draghi makes for a nice jumphost
+ sshallowed << %w{$DSA_IPS 82.195.75.106 2001:41b8:202:deb:1a1a:0:52c3:4b6a}
+
+ if %w{draghi}.include?(@hostname) then
+ sshallowed << '$HOST_DEBIAN'