opendev/puppet-iptables
Code Issues Proposed changes

Change cacti IP address

Browse Source 
Change-Id: Ifdd3edabb442eea5bb67898e8a08bc323d6165a0
This commit is contained in:
James E. Blair 2016-05-23 10:52:53 -07:00
parent 5151e454c4
commit 9457575632
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/rules.erb
View File

@ -11,8 +11,7 @@
# SSH from anywhere
-A openstack-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
# SNMP from openstack cacti
-A openstack-INPUT -m udp -p udp --dport 161 -s 50.57.120.246 -j ACCEPT
-A openstack-INPUT -m udp -p udp --dport 161 -s 198.61.215.188 -j ACCEPT
-A openstack-INPUT -m udp -p udp --dport 161 -s 104.239.135.208 -j ACCEPT
# Public TCP ports
<% @public_tcp_ports.each do |port| -%>
-A openstack-INPUT -m state --state NEW -m tcp -p tcp --dport <%= port %> -j ACCEPT