On Fri, Aug 28, 2020 at 4:29 PM Stephen John Smoogen
<smooge(a)gmail.com>
wrote:
>
>
> Currently the builders are trying to contact os-node boxes on port 8443
but that is not where fas-all lives.
>
> diff --git a/roles/base/templates/iptables/iptables.kojibuilder
b/roles/base/templates/iptables/iptables.kojibuilder
> index a3819777c..805cf735f 100644
> --- a/roles/base/templates/iptables/iptables.kojibuilder
> +++ b/roles/base/templates/iptables/iptables.kojibuilder
> @@ -78,10 +78,12 @@
> -A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT
> -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT
> -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT
> -# for 2 facter auth
> --A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT
> --A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT
> --A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT
> +# for 2 facter auth (fas-all)
> +-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT
> +-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT
> +-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT
> +-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT
> +
>
> #nfs to
vtap-fedora-nfs01.storage.phx2.redhat.com - a little to
wide-open - but
> # kinda necessary
>
+1 from me.
--
真実はいつも一つ!/ Always, there's only one truth!
_______________________________________________
infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
To unsubscribe send an email to
infrastructure-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedora...