| 2010-03-21 |
Stephen Gran | restrict schroeder ssh
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-18 |
Stephen Gran | add nixon key for pettersson
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-16 |
Stephen Gran | stupid net-lsearch type
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-15 |
Stephen Gran | allow local_part_suffixes in procmail router
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | enable the nf_ftp_conntrack hook
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | stop serving a broken file for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | and let's try pointing at the right file
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | and the inevitable syntax error
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | a stab at auto loading conntrack modules
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | add ferm to tchaikovsky
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-08 |
Stephen Gran | restrict ssh to tchaikovsky
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | v6 rule is v6
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | handel gets a firewall
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | try not to double include rietz when we do puppetize it
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | add rietz back into munin
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | match subnets that might exist
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | add https ferm rule to apache class for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | munin must run ip6 plugin as root as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | make v6ips fail more gracefully
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | get package name right
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | reshuffle where template is served from
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | bandwidth graphs for v6
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | alphabetize
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | some whitespace cleanup and move template to base class
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | handle lack of v6 addresses nicely
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | some more no_munin hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | more whitespace
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | whitespace nazi
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | get rid of way too many munin subclasses
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | confine ip addr fact to linux
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | yes, picky pain
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | since we log to ulog, we should probably install it
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | erm, time is tcp, ntp is udp
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | sigh
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | picky picky
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | allow time for ancina and zelenka
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | some more ferm fixups
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv...
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | buildd get minimal firewalls
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | this should be cool
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | Revert "we want counters"
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | get the ferm variable right
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | and add a nop rule for munin
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv...
|
commit | commitdiff | tree |
| 2010-03-07 |
Stephen Gran | new ipaddress fact
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | see if global_variables works
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | and not cause a syntax error
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | and actually ship it
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | add first stab at interfaces
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | try in place array, but with bonus for syntactic correctness
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | try in place array
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | restore stunnel rule
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | humph
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | first stab at http limit rules - how bad can it go?
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | piatti has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | let's see if this works
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | Revert "first stab at opening firewall for actual mail...
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | Revert "er, not a case statement"
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | er, not a case statement
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | first stab at opening firewall for actual mail port
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | add submission for mx machines
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | nagios also wants to talk smtp
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | convert ssh to new rule format
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | quoting, maybe
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | another try
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | restrict smtp
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-06 |
Stephen Gran | beethoven has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-03-03 |
Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv...
|
commit | commitdiff | tree |
| 2010-03-03 |
Stephen Gran | quiet can't find plugins noise
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-28 |
Stephen Gran | add my ppp ip as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-28 |
Stephen Gran | add fact for megaraid controllers
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-25 |
Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv...
|
commit | commitdiff | tree |
| 2010-02-25 |
Stephen Gran | strip some of the randomness
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | line wrap motd
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | stop doubling up an entry
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | add puppetmaster role
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | be a little more liberal about throwing away MS traffic
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | this should be empty for those hosters
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-24 |
Stephen Gran | use the right list of hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | move inclusion of samhain to the end of the block,...
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | clean up samhain template by role instead of by hostname
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | and even more carefully this time
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | skip hosts without ip addresses in ldap
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | bartok gets ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | add debian hosts to the list
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | and recursors should allow localnets ...
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | name new class correctly
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | add bartok as recursor for manda
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | add bartok as a recursor
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | add local DNS recursor class
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | /etc/ferm is now also (kind of, almost) under puppet...
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | ferm.conf is now (kind of, almost) under puppet control
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | and name them usefully
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | use v4 for iptables and v6 for ip6tables
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | make MS ports quiet
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | add draghi as nagios host, as it needs to connect to...
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | try to make samhain quiet about ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-23 |
Stephen Gran | zobel!
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-22 |
Stephen Gran | quiet down, you
Signed-off-by: Stephen Gran <steve@lobefin.net>
|
commit | commitdiff | tree |
| 2010-02-22 |
Stephen Gran | Revert "unrestrict geo2,3"
|
commit | commitdiff | tree |
| next |
projects / mirror / dsa-puppet.git / search