From: Aurelien Jarno Date: Mon, 19 Sep 2016 22:07:34 +0000 (+0200) Subject: Allow access to danzi.d.o from ganeti2.ubc.d.o X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=61b7d168fbf5a6d387b019783cac8f52ca84f5b2;p=mirror%2Fdsa-puppet.git Allow access to danzi.d.o from ganeti2.ubc.d.o Signed-off-by: Aurelien Jarno --- diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index cc67dfb73..d12ad6788 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -390,12 +390,12 @@ class ferm::per-host { @ferm::rule { 'dsa-postgres-danzi': # ubc, wuit description => 'Allow postgress access', - rule => '&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 5.153.231.18/32 ))' + rule => '&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 209.87.16.0/24 5.153.231.18/32 ))' } @ferm::rule { 'dsa-postgres-danzi6': domain => 'ip6', description => 'Allow postgress access', - rule => '&SERVICE_RANGE(tcp, 5433, ( 2607:f8f0:610:4000::/64 2001:41c8:1000:21::21:18/128 ))' + rule => '&SERVICE_RANGE(tcp, 5433, ( 2607:f8f0:610:4000::/64 2607:f8f0:614:1::/64 2001:41c8:1000:21::21:18/128 ))' } @ferm::rule { 'dsa-postgres2-danzi':