2018-12-17 |
Peter Palfrader | reload ferm on changes instead of restart |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: sallinen |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:debsources, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:debsources |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dedup |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:bacula |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:wannabuild, remove duplicate allow... |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:wannabuild |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dak, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:dak |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:main, fix |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: bmdb1:main |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | ferm cleanup: fasolo postgres |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | test avoiding hardcoding addresses |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | no more varnish on sibelius |
tree | commitdiff |
2018-11-13 |
Peter Palfrader | bugs-search no longer runs on sonntag |
tree | commitdiff |
2018-11-01 |
Julien Cristau | Drop firewall rule for pg @ sibelius |
tree | commitdiff |
2018-10-31 |
Peter Palfrader | unique all ip addresses |
tree | commitdiff |
2018-10-31 |
Peter Palfrader | Try a unique around v4addrs |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | Move logging and related/established out of ferm.conf... |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | move munin rules from conf.d to the rules dir, 2 |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | move munin rules from conf.d to the rules dir |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | rename interfaces to 50-munin-interfaces |
tree | commitdiff |
2018-10-30 |
Peter Palfrader | change default ferm rule priority to 10 from 00 |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | try a HEREdoc as the syntax checker seems to have issue... |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | allow respighi to access udd on ullmann |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | merge ipv4 and ipv6 rule for ullmann's dsa-postgres... |
tree | commitdiff |
2018-10-16 |
Peter Palfrader | fix a prefix len in dsa-postgres-udd6 |
tree | commitdiff |
2018-10-10 |
Peter Palfrader | Start with removing some moszumanska entries (in partic... |
tree | commitdiff |
2018-08-07 |
Julien Cristau | Revert "allow access to pg on vittoria for dc18" |
tree | commitdiff |
2018-08-07 |
Julien Cristau | Revert "RT#7368: add additional IP" |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | retire old cleanup job for ip6_ munin plugins |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | Make sure nodeinfo['misc']['v[46]addrs'] always exists... |
tree | commitdiff |
2018-07-31 |
Peter Palfrader | ferm/munin: use already split v[46]addrs for munin... |
tree | commitdiff |
2018-07-29 |
Martin Zobel-Helas | RT#7368: add additional IP |
tree | commitdiff |
2018-07-27 |
Julien Cristau | allow access to pg on vittoria for dc18 |
tree | commitdiff |
2018-07-17 |
Julien Cristau | Remove wheezy-supporting cruft |
tree | commitdiff |
2018-05-29 |
Peter Palfrader | sallinen: retire 443->5473 dnat |
tree | commitdiff |
2018-05-28 |
Peter Palfrader | pg firewalling |
tree | commitdiff |
2018-05-28 |
Peter Palfrader | add lw07 to snapshot_web group |
tree | commitdiff |
2018-03-11 |
Peter Palfrader | There is no ferm-restart Exec to notify |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | ferm::conf - include ferm |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | start ferm config with a 00-init and start SSH*SOURCES... |
tree | commitdiff |
2018-03-06 |
Peter Palfrader | ferm::conf - merge with tor version |
tree | commitdiff |
2018-02-02 |
Tollef Fog Heen | No more conntrackd in bm, so drop firewall opening |
tree | commitdiff |
2018-02-01 |
Martin Zobel-Helas | Merge branch 'master' of git+ssh://git2.debian.org... |
tree | commitdiff |
2018-02-01 |
Peter Palfrader | remove bendel/lists blackhole rules that are probably... |
tree | commitdiff |
2018-01-04 |
Peter Palfrader | give sallinen pg access to sibelius |
tree | commitdiff |
2017-10-19 |
Luca Filipozzi | Merge branch 'master' of ssh://handel.debian.org/~... |
tree | commitdiff |
2017-10-19 |
Luca Filipozzi | remove custom casulana rules |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | add more casulana rules for br1 |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | add masquerade rules for casulana virtual machines |
tree | commitdiff |
2017-10-18 |
Luca Filipozzi | undo casulana custom roles |
tree | commitdiff |
2017-10-17 |
Luca Filipozzi | fix up the custom cloud-admins rule |
tree | commitdiff |
2017-10-17 |
Luca Filipozzi | custom rule for cloud-builds on casaluna |
tree | commitdiff |
2017-10-01 |
Julien Cristau | Use postgres::backup_source for danzi's main pg cluster |
tree | commitdiff |
2017-09-29 |
Julien Cristau | fixup ferm rule for danzi |
tree | commitdiff |
2017-09-29 |
Julien Cristau | update ferm rules for postgresql@danzi |
tree | commitdiff |
2017-09-05 |
Peter Palfrader | switch buxtehude to more puppetized pg backups |
tree | commitdiff |
2017-09-03 |
Peter Palfrader | firewall: Start moving vittoria over to puppetized... |
tree | commitdiff |
2017-09-03 |
Peter Palfrader | remove temporary dc17 access to vittoria |
tree | commitdiff |
2017-09-01 |
Peter Palfrader | manual entries for melartin for fw, authkeys, and make... |
tree | commitdiff |
2017-08-26 |
Peter Palfrader | Retire stockhausen/listsearch (RT#6848) |
tree | commitdiff |
2017-08-07 |
Tollef Fog Heen | Allow traffic from Fastly to 5141 instead and set up... |
tree | commitdiff |
2017-08-06 |
Julien Cristau | ferm: accept syslog from fastly IPs |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | for DC17, permit another IPv4 address to access vittori... |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | typo |
tree | commitdiff |
2017-08-03 |
Luca Filipozzi | allow DC17 machine(s) to access postgres on vittoria |
tree | commitdiff |
2017-06-20 |
Aurelien Jarno | ferm/aql: fix multicast rule |
tree | commitdiff |
2017-04-26 |
Martin Zobel-Helas | Merge branch 'master' of git+ssh://puppet.debian.org... |
tree | commitdiff |
2017-04-20 |
Aurelien Jarno | Fix previous commit |
tree | commitdiff |
2017-04-20 |
Aurelien Jarno | Drop outgoing IPv4 multicast traffic at AQL |
tree | commitdiff |
2017-04-11 |
Martin Zobel-Helas | Merge remote-tracking branch 'waldi/rsyncd-vsftpd-syste... |
tree | commitdiff |
2017-04-11 |
Aurelien Jarno | Only switch FTP conntrack to explicit CT target for... |
tree | commitdiff |
2017-04-11 |
Aurelien Jarno | Switch FTP conntrack to explicit CT target |
tree | commitdiff |
2017-03-28 |
Peter Palfrader | bacula db access from storace |
tree | commitdiff |
2017-03-19 |
Martin Zobel-Helas | Merge branch 'master' of git+ssh://puppet.debian.org... |
tree | commitdiff |
2017-03-18 |
Julien Cristau | Attempt to fix version comparisons |
tree | commitdiff |
2017-03-18 |
root | puppet 4 foo |
tree | commitdiff |
2017-03-18 |
root | puppet 4 foo |
tree | commitdiff |
2017-02-27 |
Peter Palfrader | backup hosts to buxtehude |
tree | commitdiff |
2017-02-26 |
Peter Palfrader | bmdb1 ferm syntax fix |
tree | commitdiff |
2017-02-26 |
Peter Palfrader | allow pg access to bmdb1 debsources from backup hosts |
tree | commitdiff |
2017-02-26 |
Peter Palfrader | allow pg access to melartin from backup hosts |
tree | commitdiff |
2017-02-13 |
Peter Palfrader | remove no longer needed rsync access ferm role - glinka... |
tree | commitdiff |
2017-01-07 |
Peter Palfrader | retire oyens |
tree | commitdiff |
2016-12-08 |
Aurelien Jarno | decommission franck |
tree | commitdiff |
2016-10-30 |
Aurelien Jarno | Give projectb access to usper |
tree | commitdiff |
2016-10-25 |
Peter Palfrader | rename ubc-enc2b9 to ubc-enc2bl09 |
tree | commitdiff |
2016-10-25 |
Peter Palfrader | rename ubc-enc2b2 to ubc-enc2bl02 |
tree | commitdiff |
2016-10-25 |
Peter Palfrader | rename ubc-enc2b1 to ubc-enc2bl01 |
tree | commitdiff |
2016-10-22 |
Julien Cristau | Add fasolo as ftp-master |
tree | commitdiff |
2016-09-28 |
Julien Cristau | rsync on gretchaninov |
tree | commitdiff |
2016-09-24 |
Aurelien Jarno | Update buxtehude IP on sonntag firewall |
tree | commitdiff |
2016-09-24 |
Aurelien Jarno | Update ullmann IPs on bmdb1 firewall |
tree | commitdiff |
2016-09-23 |
Aurelien Jarno | We don't need tftpd on jenko.d.o anymore |
tree | commitdiff |
2016-09-21 |
Aurelien Jarno | Allow access to danzi from the new UBC network |
tree | commitdiff |
2016-09-19 |
Aurelien Jarno | Allow access to danzi.d.o from ganeti2.ubc.d.o |
tree | commitdiff |
2016-09-19 |
Aurelien Jarno | nono has moved, update its IP |
tree | commitdiff |
2016-09-04 |
Luca Filipozzi | add temporary rules to permit ssh from mnt and vpn... |
tree | commitdiff |
next |