projects
/
mirror
/
dsa-puppet.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
add Forwarded-For header
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
2018-07-31
Peter Palfrader
retire old cleanup job for ip6_ munin plugins
tree
|
commitdiff
2018-07-31
Peter Palfrader
Make sure nodeinfo['misc']['v[46]addrs'] always exists...
tree
|
commitdiff
2018-07-31
Peter Palfrader
ferm/munin: use already split v[46]addrs for munin...
tree
|
commitdiff
2018-07-29
Martin Zobel-Helas
RT#7368: add additional IP
tree
|
commitdiff
2018-07-27
Julien Cristau
allow access to pg on vittoria for dc18
tree
|
commitdiff
2018-07-17
Julien Cristau
Remove wheezy-supporting cruft
tree
|
commitdiff
2018-06-18
Julien Cristau
Update my home ip ranges yet again
tree
|
commitdiff
2018-05-29
Peter Palfrader
sallinen: retire 443->5473 dnat
tree
|
commitdiff
2018-05-28
Peter Palfrader
pg firewalling
tree
|
commitdiff
2018-05-28
Peter Palfrader
add lw07 to snapshot_web group
tree
|
commitdiff
2018-05-06
Julien Cristau
New IP ranges for jcristau
tree
|
commitdiff
2018-03-11
Peter Palfrader
There is no ferm-restart Exec to notify
tree
|
commitdiff
2018-03-06
Peter Palfrader
ferm::conf - include ferm
tree
|
commitdiff
2018-03-06
Peter Palfrader
start ferm config with a 00-init and start SSH*SOURCES...
tree
|
commitdiff
2018-03-06
Peter Palfrader
ferm::conf - merge with tor version
tree
|
commitdiff
2018-02-08
Martin Zobel-Helas
remove sgran IP range. he can hop via master if needed
tree
|
commitdiff
2018-02-02
Tollef Fog Heen
No more conntrackd in bm, so drop firewall opening
tree
|
commitdiff
2018-02-01
Martin Zobel-Helas
Merge branch 'master' of git+ssh://git2.debian.org...
tree
|
commitdiff
2018-02-01
Peter Palfrader
remove bendel/lists blackhole rules that are probably...
tree
|
commitdiff
2018-01-06
Peter Palfrader
Allow adayevskaya to ssh trigger puppetmaster/handel
tree
|
commitdiff
2018-01-04
Peter Palfrader
give sallinen pg access to sibelius
tree
|
commitdiff
2017-11-23
Julien Cristau
Add extra netnod servers to ferm
tree
|
commitdiff
2017-10-19
Luca Filipozzi
Merge branch 'master' of ssh://handel.debian.org/~...
tree
|
commitdiff
2017-10-19
Luca Filipozzi
remove custom casulana rules
tree
|
commitdiff
2017-10-18
Luca Filipozzi
always a typo
tree
|
commitdiff
2017-10-18
Luca Filipozzi
prune ssh ACLs for luca
tree
|
commitdiff
2017-10-18
Luca Filipozzi
add more casulana rules for br1
tree
|
commitdiff
2017-10-18
Luca Filipozzi
add masquerade rules for casulana virtual machines
tree
|
commitdiff
2017-10-18
Luca Filipozzi
undo casulana custom roles
tree
|
commitdiff
2017-10-17
Luca Filipozzi
fix up the custom cloud-admins rule
tree
|
commitdiff
2017-10-17
Luca Filipozzi
custom rule for cloud-builds on casaluna
tree
|
commitdiff
2017-10-03
Julien Cristau
Add syncproxy addresses to ssh whitelist
tree
|
commitdiff
2017-10-03
Julien Cristau
Restrict ssh to mirrors
tree
|
commitdiff
2017-10-01
Julien Cristau
Use postgres::backup_source for danzi's main pg cluster
tree
|
commitdiff
2017-09-29
Julien Cristau
fixup ferm rule for danzi
tree
|
commitdiff
2017-09-29
Julien Cristau
update ferm rules for postgresql@danzi
tree
|
commitdiff
2017-09-27
Julien Cristau
Revert "Restrict ssh to anycast and static mirrors"
tree
|
commitdiff
2017-09-27
Julien Cristau
Restrict ssh to anycast and static mirrors
tree
|
commitdiff
2017-09-10
Aurelien Jarno
ferm: restrict access to all buildds
tree
|
commitdiff
2017-09-05
Peter Palfrader
switch buxtehude to more puppetized pg backups
tree
|
commitdiff
2017-09-03
Peter Palfrader
firewall: Start moving vittoria over to puppetized...
tree
|
commitdiff
2017-09-03
Peter Palfrader
remove temporary dc17 access to vittoria
tree
|
commitdiff
2017-09-01
Peter Palfrader
manual entries for melartin for fw, authkeys, and make...
tree
|
commitdiff
2017-08-26
Peter Palfrader
Retire stockhausen/listsearch (RT#6848)
tree
|
commitdiff
2017-08-13
Peter Palfrader
Add 62.46.0.0/15 to weasel's networks
tree
|
commitdiff
2017-08-07
Tollef Fog Heen
Allow traffic from Fastly to 5141 instead and set up...
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix getfastlyranges harder
tree
|
commitdiff
2017-08-06
Tollef Fog Heen
Update IPs for tfheen
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix template syntax
tree
|
commitdiff
2017-08-06
Julien Cristau
Handle exceptions from reading fastly IP ranges
tree
|
commitdiff
2017-08-06
Julien Cristau
ferm: accept syslog from fastly IPs
tree
|
commitdiff
2017-08-03
Luca Filipozzi
for DC17, permit another IPv4 address to access vittori...
tree
|
commitdiff
2017-08-03
Luca Filipozzi
typo
tree
|
commitdiff
2017-08-03
Luca Filipozzi
allow DC17 machine(s) to access postgres on vittoria
tree
|
commitdiff
2017-07-22
Peter Palfrader
new network space for weasel
tree
|
commitdiff
2017-06-20
Aurelien Jarno
ferm/aql: fix multicast rule
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
add my other subnet
tree
|
commitdiff
2017-04-20
Aurelien Jarno
Fix previous commit
tree
|
commitdiff
2017-04-20
Aurelien Jarno
Drop outgoing IPv4 multicast traffic at AQL
tree
|
commitdiff
2017-04-11
Martin Zobel-Helas
Merge remote-tracking branch 'waldi/rsyncd-vsftpd-syste...
tree
|
commitdiff
2017-04-11
Aurelien Jarno
Only switch FTP conntrack to explicit CT target for...
tree
|
commitdiff
2017-04-11
Aurelien Jarno
Switch FTP conntrack to explicit CT target
tree
|
commitdiff
2017-03-28
Peter Palfrader
bacula db access from storace
tree
|
commitdiff
2017-03-19
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-03-18
Julien Cristau
Attempt to fix version comparisons
tree
|
commitdiff
2017-03-18
Peter Palfrader
fix template
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-02-27
Peter Palfrader
backup hosts to buxtehude
tree
|
commitdiff
2017-02-26
Peter Palfrader
bmdb1 ferm syntax fix
tree
|
commitdiff
2017-02-26
Peter Palfrader
allow pg access to bmdb1 debsources from backup hosts
tree
|
commitdiff
2017-02-26
Peter Palfrader
allow pg access to melartin from backup hosts
tree
|
commitdiff
2017-02-13
Peter Palfrader
remove no longer needed rsync access ferm role - glinka...
tree
|
commitdiff
2017-01-10
Peter Palfrader
other sil network for weasel
tree
|
commitdiff
2017-01-07
Peter Palfrader
retire oyens
tree
|
commitdiff
2016-12-08
Aurelien Jarno
decommission franck
tree
|
commitdiff
2016-10-30
Aurelien Jarno
Give projectb access to usper
tree
|
commitdiff
2016-10-25
Peter Palfrader
rename ubc-enc2b9 to ubc-enc2bl09
tree
|
commitdiff
2016-10-25
Peter Palfrader
rename ubc-enc2b2 to ubc-enc2bl02
tree
|
commitdiff
2016-10-25
Peter Palfrader
rename ubc-enc2b1 to ubc-enc2bl01
tree
|
commitdiff
2016-10-22
Julien Cristau
Add fasolo as ftp-master
tree
|
commitdiff
2016-10-13
Luca Filipozzi
add new host for luca
tree
|
commitdiff
2016-10-07
Luca Filipozzi
remove fubar.emyr.net from luca's list of hosts
tree
|
commitdiff
2016-10-05
Luca Filipozzi
add IPv4 address for luca's new jumphost
tree
|
commitdiff
2016-09-28
Julien Cristau
rsync on gretchaninov
tree
|
commitdiff
2016-09-26
Luca Filipozzi
new cable modem
tree
|
commitdiff
2016-09-24
Aurelien Jarno
Update buxtehude IP on sonntag firewall
tree
|
commitdiff
2016-09-24
Aurelien Jarno
Update ullmann IPs on bmdb1 firewall
tree
|
commitdiff
2016-09-23
Aurelien Jarno
We don't need tftpd on jenko.d.o anymore
tree
|
commitdiff
2016-09-21
Aurelien Jarno
Allow access to danzi from the new UBC network
tree
|
commitdiff
2016-09-19
Aurelien Jarno
Allow access to danzi.d.o from ganeti2.ubc.d.o
tree
|
commitdiff
2016-09-19
Aurelien Jarno
nono has moved, update its IP
tree
|
commitdiff
2016-09-04
Luca Filipozzi
add temporary rules to permit ssh from mnt and vpn...
tree
|
commitdiff
2016-09-03
Luca Filipozzi
add rule to allow access from manlan
tree
|
commitdiff
2016-07-25
Peter Palfrader
remove dc16 access to pg on vittoria (re: RT#6355)
tree
|
commitdiff
2016-06-29
Julien Cristau
Helps if I open the right port
tree
|
commitdiff
2016-06-29
Julien Cristau
Allow dc16 hosts to access postgres on vittoria
tree
|
commitdiff
2016-06-28
Julien Cristau
Add topinambour.cristau.org to DSA_IPS
tree
|
commitdiff
2016-06-28
Peter Palfrader
Add people.do to DSA_IPs
tree
|
commitdiff
next