2019-09-23 |
Julien Cristau | bacula cluster moved to postgresql-manda-01 |
tree | commitdiff |
2019-09-22 |
Aurelien Jarno | danzi: merge dsa-postgres2-danzi and dsa-postgres2... |
tree | commitdiff |
2019-09-22 |
Aurelien Jarno | danzi: merge dsa-postgres-danzi and dsa-postgres-danzi6 |
tree | commitdiff |
2019-09-22 |
Aurelien Jarno | Allow access to the tracker db @ danzi from ticharich |
tree | commitdiff |
2019-09-22 |
Peter Palfrader | Remove empty ferm::zivit |
tree | commitdiff |
2019-09-22 |
Peter Palfrader | iptables -vnL on zelenka suggests that zivit no longer... |
tree | commitdiff |
2019-09-22 |
Peter Palfrader | Apparently we no longer monitor the time service on... |
tree | commitdiff |
2019-09-21 |
Aurelien Jarno | Decommission rusca (RT#7949) |
tree | commitdiff |
2019-09-16 |
Aurelien Jarno | wannabuild has been moved from bmdb1 to danzi |
tree | commitdiff |
2019-09-16 |
Peter Palfrader | If the name is too long for netfilter, hash it |
tree | commitdiff |
2019-09-16 |
Peter Palfrader | Try a new ferm rule class |
tree | commitdiff |
2019-09-16 |
Peter Palfrader | whitespace/quoting: modules/ferm/manifests/ (make lint... |
tree | commitdiff |
2019-09-13 |
Peter Palfrader | Try to avoid reserved site keyword |
tree | commitdiff |
2019-09-10 |
Julien Cristau | ferm::ftp_conntrack: remove jessie support |
tree | commitdiff |
2019-09-07 |
Peter Palfrader | stop using virtual resources for ferm::rule |
tree | commitdiff |
2019-08-30 |
Peter Palfrader | remove olin from bmdb1 access |
tree | commitdiff |
2019-08-22 |
Peter Palfrader | move syslog ferm into syslog role |
tree | commitdiff |
2019-06-09 |
Luca Filipozzi | allow ssh access to ubc-node-arm* from ubc-bulwark... |
tree | commitdiff |
2019-05-28 |
Peter Palfrader | snapshotdb-manda-01: allow pg access from lw |
tree | commitdiff |
2019-05-23 |
Peter Palfrader | Allow snapshotdb-manda-01 to access pg on sallinen |
tree | commitdiff |
2019-04-03 |
Aurelien Jarno | Allow access to dak@bmdb1 from ullmann |
tree | commitdiff |
2019-04-03 |
Aurelien Jarno | Allow access to wanna-build@bmdb1 from respighi |
tree | commitdiff |
2019-04-02 |
Aurelien Jarno | Allow access to ullmann from wuiet |
tree | commitdiff |
2019-03-17 |
Aurelien Jarno | Decommission lully.d.o |
tree | commitdiff |
2019-01-28 |
Julien Cristau | add loghost-osuosl-01 |
tree | commitdiff |
2018-12-17 |
Peter Palfrader | reload ferm on changes instead of restart |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: sallinen |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:debsources, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:debsources |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dedup |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:bacula |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:wannabuild, remove duplicate allow... |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:wannabuild |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dak, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dak |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:main, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:main |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: fasolo postgres |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | test avoiding hardcoding addresses |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | no more varnish on sibelius |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | bugs-search no longer runs on sonntag |
tree | commitdiff |
2018-11-01 |
Julien Cristau | Drop firewall rule for pg @ sibelius |
tree | commitdiff |
2018-10-31 |
Peter Palfrader | unique all ip addresses |
tree | commitdiff |
2018-10-31 |
Peter Palfrader | Try a unique around v4addrs |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | Move logging and related/established out of ferm.conf... |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | move munin rules from conf.d to the rules dir, 2 |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | move munin rules from conf.d to the rules dir |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | rename interfaces to 50-munin-interfaces |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | change default ferm rule priority to 10 from 00 |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | try a HEREdoc as the syntax checker seems to have issue... |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | allow respighi to access udd on ullmann |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | merge ipv4 and ipv6 rule for ullmann's dsa-postgres... |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | fix a prefix len in dsa-postgres-udd6 |
tree | commitdiff |
2018-10-10 |
Peter Palfrader | Start with removing some moszumanska entries (in partic... |
tree | commitdiff |
2018-08-07 |
Julien Cristau | Revert "allow access to pg on vittoria for dc18" |
tree | commitdiff |
2018-08-07 |
Julien Cristau | Revert "RT#7368: add additional IP" |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | retire old cleanup job for ip6_ munin plugins |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | Make sure nodeinfo['misc']['v[46]addrs'] always exists... |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | ferm/munin: use already split v[46]addrs for munin... |
tree | commitdiff |
2018-07-29 |
Martin Zobel-Helas | RT#7368: add additional IP |
tree | commitdiff |
2018-07-27 |
Julien Cristau | allow access to pg on vittoria for dc18 |
tree | commitdiff |
2018-07-17 |
Julien Cristau | Remove wheezy-supporting cruft |
tree | commitdiff |
2018-05-29 |
Peter Palfrader | sallinen: retire 443->5473 dnat |
tree | commitdiff |
2018-05-28 |
Peter Palfrader | pg firewalling |
tree | commitdiff |
2018-05-28 |
Peter Palfrader | add lw07 to snapshot_web group |
tree | commitdiff |
2018-03-11 |
Peter Palfrader | There is no ferm-restart Exec to notify |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | ferm::conf - include ferm |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | start ferm config with a 00-init and start SSH*SOURCES... |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | ferm::conf - merge with tor version |
tree | commitdiff |
2018-02-02 |
Tollef Fog Heen | No more conntrackd in bm, so drop firewall opening |
tree | commitdiff |
2018-02-01 |
Martin Zobel-Helas | Merge branch 'master' of git+ssh://git2.debian.org... |
tree | commitdiff |
2018-02-01 |
Peter Palfrader | remove bendel/lists blackhole rules that are probably... |
tree | commitdiff |
2018-01-04 |
Peter Palfrader | give sallinen pg access to sibelius |
tree | commitdiff |
2017-10-19 |
Luca Filipozzi | Merge branch 'master' of ssh://handel.debian.org/~... |
tree | commitdiff |
2017-10-19 |
Luca Filipozzi | remove custom casulana rules |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | add more casulana rules for br1 |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | add masquerade rules for casulana virtual machines |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | undo casulana custom roles |
tree | commitdiff |
2017-10-17 |
Luca Filipozzi | fix up the custom cloud-admins rule |
tree | commitdiff |
2017-10-17 |
Luca Filipozzi | custom rule for cloud-builds on casaluna |
tree | commitdiff |
2017-10-01 |
Julien Cristau | Use postgres::backup_source for danzi's main pg cluster |
tree | commitdiff |
2017-09-29 |
Julien Cristau | fixup ferm rule for danzi |
tree | commitdiff |
2017-09-29 |
Julien Cristau | update ferm rules for postgresql@danzi |
tree | commitdiff |
2017-09-05 |
Peter Palfrader | switch buxtehude to more puppetized pg backups |
tree | commitdiff |
2017-09-03 |
Peter Palfrader | firewall: Start moving vittoria over to puppetized... |
tree | commitdiff |
2017-09-03 |
Peter Palfrader | remove temporary dc17 access to vittoria |
tree | commitdiff |
2017-09-01 |
Peter Palfrader | manual entries for melartin for fw, authkeys, and make... |
tree | commitdiff |
2017-08-26 |
Peter Palfrader | Retire stockhausen/listsearch (RT#6848) |
tree | commitdiff |
2017-08-07 |
Tollef Fog Heen | Allow traffic from Fastly to 5141 instead and set up... |
tree | commitdiff |
2017-08-06 |
Julien Cristau | ferm: accept syslog from fastly IPs |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | for DC17, permit another IPv4 address to access vittori... |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | typo |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | allow DC17 machine(s) to access postgres on vittoria |
tree | commitdiff |
2017-06-20 |
Aurelien Jarno | ferm/aql: fix multicast rule |
tree | commitdiff |
2017-04-26 |
Martin Zobel-Helas | Merge branch 'master' of git+ssh://puppet.debian.org... |
tree | commitdiff |
2017-04-20 |
Aurelien Jarno | Fix previous commit |
tree | commitdiff |
2017-04-20 |
Aurelien Jarno | Drop outgoing IPv4 multicast traffic at AQL |
tree | commitdiff |
2017-04-11 |
Martin Zobel-Helas | Merge remote-tracking branch 'waldi/rsyncd-vsftpd-syste... |
tree | commitdiff |
2017-04-11 |
Aurelien Jarno | Only switch FTP conntrack to explicit CT target for... |
tree | commitdiff |
2017-04-11 |
Aurelien Jarno | Switch FTP conntrack to explicit CT target |
tree | commitdiff |
next |