Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/227711
Change subject: Add ferm rules for dataset NFS server
......................................................................
Add ferm rules for dataset NFS server
Bug: T104991
Change-Id: I4da66cf7f10756f1bef1bef468f0ef3090c9cb31
---
M modules/dataset/manifests/nfs.pp
1 file changed, 23 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/11/227711/1
diff --git a/modules/dataset/manifests/nfs.pp b/modules/dataset/manifests/nfs.pp
index 41391a8..7caf228 100644
--- a/modules/dataset/manifests/nfs.pp
+++ b/modules/dataset/manifests/nfs.pp
@@ -55,4 +55,27 @@
check_command => 'check_tcp!2049',
}
+ ferm::service { 'nfs_rpc_mountd':
+ proto => 'tcp',
+ port => '32767'
+ srange => '$INTERNAL',
+ }
+
+ ferm::service { 'nfs_rpc_statd':
+ proto => 'tcp',
+ port => '32765'
+ srange => '$INTERNAL',
+ }
+
+ ferm::service { 'nfs_portmapper_udp':
+ proto => 'udp',
+ port => '111'
+ srange => '$INTERNAL',
+ }
+
+ ferm::service { 'nfs_portmapper_tcp':
+ proto => 'tcp',
+ port => '111'
+ srange => '$INTERNAL',
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/227711
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I4da66cf7f10756f1bef1bef468f0ef3090c9cb31
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
