snapshot - drop traffic from 61.69.254.110

diff --git a/modules/roles/manifests/snapshot_web.pp b/modules/roles/manifests/snapshot_web.pp
index b4d6703..6a6414f 100644 (file)
--- a/modules/roles/manifests/snapshot_web.pp
+++ b/modules/roles/manifests/snapshot_web.pp
@@ -2,6 +2,13 @@ class roles::snapshot_web {
        include apache2
        include apache2::rewrite
 
+       # snapshot abusers
+       #  61.69.254.110 - 20180705, mirroring with wget
+       @ferm::rule { 'dsa-nat-snapshot-varnish-v4':
+               prio  => "000",
+               rule  => "saddr (61.69.254.110) DROP",
+       }
+
        ensure_packages ( [
                "libapache2-mod-wsgi",
                ], {