From cb99d997e736f428f4f1264a0894e30b5302ef3d Mon Sep 17 00:00:00 2001 From: Luca Filipozzi Date: Sun, 9 Jun 2019 13:34:39 -0700 Subject: [PATCH] allow ssh access to ubc-node-arm* from ubc-bulwark (internal) --- modules/ferm/manifests/per_host.pp | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp index 2bc1944fd..7e650f82c 100644 --- a/modules/ferm/manifests/per_host.pp +++ b/modules/ferm/manifests/per_host.pp @@ -304,11 +304,17 @@ REJECT reject-with icmp-admin-prohibited } } ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10: { - @ferm::rule { 'dsa-luca-fixme': - description => 'Allow ssh access from mnt and vpn networks', + @ferm::rule { 'dsa-ssh-priv': + description => 'Allow ssh access', rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.40.0/22 172.29.203.0/24 ))', } } + ubc-node-arm01,ubc-node-arm02,ubc-node-arm03: { + @ferm::rule { 'dsa-ssh-priv': + description => 'Allow ssh access', + rule => '&SERVICE_RANGE(tcp, 22, ( 172.29.43.240 ))', + } + } default: {} } # tftp -- 2.20.1