From 59bfcedf5fe439e370d7fbebaaa2c70cd3e03fad Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@debian.org>
Date: Wed, 3 Apr 2019 15:17:22 +0200
Subject: [PATCH] Drop traffic from 220.243.135/24 220.243.136/24 on bugs.d.o

---
 modules/roles/manifests/init.pp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 22f9af6e1..fbd564b79 100644
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -39,6 +39,10 @@ class roles {
 			notify  => Exec['service apache2 reload'],
 			key => true,
 		}
+		@ferm::rule { 'dsa-bugs-abusers':
+			prio	=> "005",
+			rule	=> "saddr (220.243.135/24 220.243.136/24) DROP",
+		}
 	}
 	if has_role('bugs_master') {
 		ssl::service { 'bugs-devel.debian.org': notify  => Exec['service apache2 reload'], key => true, }
-- 
2.20.1