projects
/
mirror
/
dsa-puppet.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
44ca89f
)
ssh restrict dns geo and dns primary hosts
author
Peter Palfrader
<peter@palfrader.org>
Sat, 7 Sep 2019 16:20:46 +0000
(18:20 +0200)
committer
Peter Palfrader
<peter@palfrader.org>
Sat, 7 Sep 2019 16:20:46 +0000
(18:20 +0200)
modules/ferm/templates/me.conf.erb
patch
|
blob
|
history
diff --git
a/modules/ferm/templates/me.conf.erb
b/modules/ferm/templates/me.conf.erb
index
a1754e8
..
e1a5817
100644
(file)
--- a/
modules/ferm/templates/me.conf.erb
+++ b/
modules/ferm/templates/me.conf.erb
@@
-29,7
+29,7
@@
should_restrict = restrict_ssh.include?(@hostname)
end
-if
restrict_ssh.include?(@hostname)
then
+if
should_restrict
then
ssh4allowed << %w{$DSA_IPS $HOST_NAGIOS_V4 $HOST_MUNIN_V4 $HOST_DB_V4}
ssh6allowed << %w{$DSA_V6_IPS $HOST_NAGIOS_V6 $HOST_MUNIN_V6 $HOST_DB_V6}