class roles::security_mirror {
include roles::archvsync_base
+ # security abusers
+ # 198.108.67.48 DoS against our rsync service
+ @ferm::rule { 'dsa-security-abusers':
+ prio => "005",
+ rule => "saddr ( 198.108.67.48/32 ) DROP",
+ }
+
$binds = $::hostname ? {
mirror-anu => [ '150.203.164.61', '[2001:388:1034:2900::3d]' ],
mirror-isc => [ '149.20.4.14', '[2001:4f8:1:c::14]' ],