Peter Palfrader [Tue, 10 Aug 2010 18:03:26 +0000 (20:03 +0200)]
Dedication and mailroute for rossini, salieri, traetta
Peter Palfrader [Tue, 10 Aug 2010 15:38:39 +0000 (17:38 +0200)]
nagios also gets to contact mail and munin on freebsd hosts
Peter Palfrader [Tue, 10 Aug 2010 15:35:10 +0000 (17:35 +0200)]
tidy up http related ferm rules
Peter Palfrader [Tue, 10 Aug 2010 15:29:37 +0000 (17:29 +0200)]
Try to tidy up forward ferm rules
Peter Palfrader [Tue, 10 Aug 2010 15:27:00 +0000 (17:27 +0200)]
ferm on rautavaara
Peter Palfrader [Tue, 10 Aug 2010 15:25:24 +0000 (17:25 +0200)]
nagios gets to port 22 on freebsd hosts
Peter Palfrader [Tue, 10 Aug 2010 15:23:13 +0000 (17:23 +0200)]
Different quote chars, II
Peter Palfrader [Tue, 10 Aug 2010 15:21:07 +0000 (17:21 +0200)]
Different quote chars
Peter Palfrader [Tue, 10 Aug 2010 15:19:20 +0000 (17:19 +0200)]
Try to limit forward
Peter Palfrader [Tue, 10 Aug 2010 15:08:56 +0000 (17:08 +0200)]
ferm on luchesi
Peter Palfrader [Tue, 10 Aug 2010 14:20:06 +0000 (16:20 +0200)]
Add kibi and aurel ssh client hosts for freebsd
Stephen Gran [Fri, 6 Aug 2010 16:27:10 +0000 (17:27 +0100)]
add master to carnet hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Thu, 5 Aug 2010 13:32:38 +0000 (15:32 +0200)]
remove non-existing hosts
Martin Zobel-Helas [Thu, 5 Aug 2010 12:17:59 +0000 (14:17 +0200)]
try if we can have hightraffic rules
Peter Palfrader [Wed, 4 Aug 2010 23:23:42 +0000 (01:23 +0200)]
sudoers: update archvsync->snapshot triggers
Peter Palfrader [Sun, 1 Aug 2010 17:34:01 +0000 (19:34 +0200)]
krenek/vitry are buildds for archive rebuilds
Peter Palfrader [Fri, 30 Jul 2010 21:38:51 +0000 (23:38 +0200)]
alain, alwyn, antheil, arna are buildds
Peter Palfrader [Fri, 30 Jul 2010 16:35:52 +0000 (18:35 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
sibelius gets ferm
Peter Palfrader [Fri, 30 Jul 2010 16:18:15 +0000 (18:18 +0200)]
porter sudo for abel
Stephen Gran [Fri, 30 Jul 2010 08:09:06 +0000 (09:09 +0100)]
sibelius gets ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Thu, 29 Jul 2010 19:12:54 +0000 (21:12 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
make the range slightly more readable
maybe that works better with correct syntax
ensure correct path permissions, so nagios can read from it
Peter Palfrader [Thu, 29 Jul 2010 19:12:46 +0000 (21:12 +0200)]
etc/motd dedication fu works better if one spells the name right
Stephen Gran [Thu, 29 Jul 2010 08:23:58 +0000 (09:23 +0100)]
make the range slightly more readable
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Wed, 28 Jul 2010 20:52:30 +0000 (22:52 +0200)]
maybe that works better with correct syntax
Martin Zobel-Helas [Wed, 28 Jul 2010 20:42:32 +0000 (22:42 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Wed, 28 Jul 2010 20:41:41 +0000 (22:41 +0200)]
ensure correct path permissions, so nagios can read from it
Peter Palfrader [Wed, 28 Jul 2010 11:45:14 +0000 (13:45 +0200)]
Add arm machines to smarthost
Peter Palfrader [Wed, 28 Jul 2010 11:44:33 +0000 (13:44 +0200)]
Add dedications
Peter Palfrader [Wed, 28 Jul 2010 11:14:13 +0000 (13:14 +0200)]
Try something for syslog fu, IV
Peter Palfrader [Wed, 28 Jul 2010 11:12:52 +0000 (13:12 +0200)]
Try something for syslog fu, III
Peter Palfrader [Wed, 28 Jul 2010 09:31:21 +0000 (11:31 +0200)]
Try something for syslog fu, II
Peter Palfrader [Wed, 28 Jul 2010 09:29:11 +0000 (11:29 +0200)]
Try something for syslog fu
Stephen Gran [Wed, 28 Jul 2010 08:13:57 +0000 (09:13 +0100)]
merikanto gets a firewall
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 28 Jul 2010 08:09:32 +0000 (09:09 +0100)]
now that nfs ports are locked down we no longer need this
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 28 Jul 2010 08:00:52 +0000 (09:00 +0100)]
beethoven is an nfs server
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 28 Jul 2010 07:56:40 +0000 (08:56 +0100)]
Change security's sudo entries
https://rt.debian.org/Ticket/Display.html?id=2420
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 27 Jul 2010 20:45:37 +0000 (22:45 +0200)]
security-master does rsync too..
Stephen Gran [Tue, 27 Jul 2010 09:29:05 +0000 (10:29 +0100)]
stabile seems to have rsync
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Jul 2010 09:14:12 +0000 (10:14 +0100)]
ravel has rsync
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Jul 2010 08:01:43 +0000 (09:01 +0100)]
copy and waste error
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Jul 2010 08:00:39 +0000 (09:00 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 27 Jul 2010 08:00:33 +0000 (09:00 +0100)]
put nfs-server in main manifest
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Jul 2010 07:59:23 +0000 (08:59 +0100)]
Add nfs-server module. Still needs menu.lst modification manually for
moduleless kernels.
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 27 Jul 2010 07:57:58 +0000 (09:57 +0200)]
%fossy to fossy ALL on vivaldi
Stephen Gran [Tue, 27 Jul 2010 07:45:26 +0000 (08:45 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 27 Jul 2010 07:44:55 +0000 (08:44 +0100)]
spohr has nfs that is able to be firewalled now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 26 Jul 2010 23:49:09 +0000 (01:49 +0200)]
the fossy group may run /etc/init.d/fossology as root on vivaldi
Stephen Gran [Mon, 26 Jul 2010 20:20:01 +0000 (21:20 +0100)]
allow paganini to serve dhcp and tftp
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Jul 2010 11:08:39 +0000 (12:08 +0100)]
samosa gets udd-stunnel
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Jul 2010 07:22:20 +0000 (08:22 +0100)]
samosa gets recursor
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Jul 2010 06:50:17 +0000 (07:50 +0100)]
kassia has rsync
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Jul 2010 06:20:01 +0000 (07:20 +0100)]
ravel and kassia have ftp
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 22:38:16 +0000 (23:38 +0100)]
ravel gets ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 22:34:29 +0000 (23:34 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 25 Jul 2010 22:33:39 +0000 (23:33 +0100)]
add ferm::nfs-server module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 22:13:02 +0000 (00:13 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 22:12:28 +0000 (00:12 +0200)]
make spohr recursor
Stephen Gran [Sun, 25 Jul 2010 22:07:04 +0000 (23:07 +0100)]
alphabetize
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 22:03:32 +0000 (00:03 +0200)]
add chopin back
Martin Zobel-Helas [Sun, 25 Jul 2010 21:58:12 +0000 (23:58 +0200)]
draghi does ldap and ldaps
Martin Zobel-Helas [Sun, 25 Jul 2010 21:47:41 +0000 (23:47 +0200)]
remove chopin
Martin Zobel-Helas [Sun, 25 Jul 2010 21:37:38 +0000 (23:37 +0200)]
add dns and finger rules for draghi
Martin Zobel-Helas [Sun, 25 Jul 2010 21:29:19 +0000 (23:29 +0200)]
spohr without firewall for now!
Martin Zobel-Helas [Sun, 25 Jul 2010 21:17:26 +0000 (23:17 +0200)]
chopin does ftp
Stephen Gran [Sun, 25 Jul 2010 20:18:13 +0000 (21:18 +0100)]
nor these two
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:15:10 +0000 (21:15 +0100)]
nor paganini
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:12:55 +0000 (21:12 +0100)]
ravel not ready yet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:02:24 +0000 (21:02 +0100)]
and use new module layout
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:59:50 +0000 (20:59 +0100)]
try to start breaking up firewall rules into something not quite as messy
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:36:06 +0000 (20:36 +0100)]
bellini has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:30:02 +0000 (20:30 +0100)]
petterson has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 19:27:32 +0000 (21:27 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 19:26:05 +0000 (21:26 +0200)]
add master
Stephen Gran [Sun, 25 Jul 2010 19:25:21 +0000 (20:25 +0100)]
cimarosa has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:23:41 +0000 (20:23 +0100)]
no longer need to double include ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:22:24 +0000 (20:22 +0100)]
Make ferm list exclusive rather than inclusive
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 18:30:46 +0000 (20:30 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 18:30:38 +0000 (20:30 +0200)]
add master
Stephen Gran [Sun, 25 Jul 2010 18:01:54 +0000 (19:01 +0100)]
well, of course - that's an obvious syntactic difference that makes no difference whatsoever in irb. Thanks, ruby
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 17:55:07 +0000 (18:55 +0100)]
cast to string
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 17:00:05 +0000 (18:00 +0100)]
s/DROP/ACCEPT/
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:40:00 +0000 (17:40 +0100)]
add smarthosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:39:06 +0000 (17:39 +0100)]
sort list
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:38:45 +0000 (17:38 +0100)]
add to buildd
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:37:55 +0000 (17:37 +0100)]
dedications
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:21:49 +0000 (17:21 +0100)]
guard against empty syslog version for new installs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 16:01:38 +0000 (18:01 +0200)]
add liszt
Martin Zobel-Helas [Sun, 25 Jul 2010 15:53:43 +0000 (17:53 +0200)]
yes, liszt might want to speak smtp
Martin Zobel-Helas [Sun, 25 Jul 2010 15:36:20 +0000 (17:36 +0200)]
add liszt
Martin Zobel-Helas [Sun, 25 Jul 2010 15:20:08 +0000 (17:20 +0200)]
add klecker
Martin Zobel-Helas [Sun, 25 Jul 2010 14:38:09 +0000 (16:38 +0200)]
be a bad zobel
Martin Zobel-Helas [Sun, 25 Jul 2010 14:28:34 +0000 (16:28 +0200)]
ries runs dns recursor
Martin Zobel-Helas [Sun, 25 Jul 2010 14:25:44 +0000 (16:25 +0200)]
add unger
Martin Zobel-Helas [Sun, 25 Jul 2010 14:23:27 +0000 (16:23 +0200)]
add rietz
Martin Zobel-Helas [Sun, 25 Jul 2010 14:19:40 +0000 (16:19 +0200)]
add ries
Martin Zobel-Helas [Sun, 25 Jul 2010 14:03:25 +0000 (16:03 +0200)]
add busoni
Martin Zobel-Helas [Sun, 25 Jul 2010 13:57:15 +0000 (15:57 +0200)]
add grieg
Martin Zobel-Helas [Sun, 25 Jul 2010 13:18:55 +0000 (15:18 +0200)]
add englund
Martin Zobel-Helas [Sun, 25 Jul 2010 12:55:43 +0000 (14:55 +0200)]
Revert "add cilea"
This reverts commit
2a3c519f08fd98199d230a7619943851cc990878.
Martin Zobel-Helas [Sun, 25 Jul 2010 12:55:36 +0000 (14:55 +0200)]
Revert "add pre-hook for cilea to load nf_conntrack_sip and nf_conntrack_h323"
This reverts commit
3ecf7721c32e4e34ee964ec57ac581ae44aca8ba.