foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update DNA gw IP's

Browse source
This commit is contained in:
Timo Makinen 2025-02-08 17:25:34 +00:00
parent 423cafe98d
commit 821e783702
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
group_vars/ns.yml
View file

@ -1,6 +1,6 @@
--- ---
firewall_in: firewall_in:
- {proto: tcp, port: 22, from: [172.20.20.0/22, 212.149.248.65/32]} - {proto: tcp, port: 22, from: [172.20.20.0/22, 212.149.225.204/32]}
- {proto: tcp, port: 53} - {proto: tcp, port: 53}
- {proto: udp, port: 53} - {proto: udp, port: 53}
- {proto: tcp, port: 80} - {proto: tcp, port: 80}

2
roles/pf/files/pf.conf.gw_home
View file

@ -43,7 +43,7 @@ antispoof for vio1
pass in quick on $int_if proto tcp from $int_net to self port ssh pass in quick on $int_if proto tcp from $int_net to self port ssh
pass in quick on $ext_if proto tcp from 37.35.86.64/29 to self port ssh pass in quick on $ext_if proto tcp from 37.35.86.64/29 to self port ssh
pass in quick on $ext_if proto tcp from 37.16.96.144/28 to self port ssh pass in quick on $ext_if proto tcp from 37.16.96.144/28 to self port ssh
pass in quick on $ext_if proto tcp from 212.149.228.253/32 to self port ssh pass in quick on $ext_if proto tcp from 212.149.225.198/32 to self port ssh
# node_exporter and unbound_exporter from internal network # node_exporter and unbound_exporter from internal network
pass in quick on $int_if proto tcp from $int_net to self port 9100 pass in quick on $int_if proto tcp from $int_net to self port 9100