Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/61931
Change subject: logmsgbot: only allow connections from tin, fenari & localhost
......................................................................
logmsgbot: only allow connections from tin, fenari & localhost
It'd be nicer to be a bit more permissive here and allow our full internal IP
ranges. Using single-address IPv6 CIDR ranges to specify single IPv4 IPs is a
bit ugly. But I didn't have a lot of time, did not want to refactor code, and
did not want to be second-guessing my arithmetic.
Change-Id: Ib33d3cc666f9c1ca0848ae067f3047d8b7939d3e
---
M manifests/site.pp
1 file changed, 2 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/31/61931/1
diff --git a/manifests/site.pp b/manifests/site.pp
index f7a48c9..a0f8fdb 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1989,7 +1989,8 @@
tcpircbot::instance { 'logmsgbot':
channel => '#wikimedia-operations',
password => $passwords::logmsgbot::logmsgbot_password,
- cidr => '::/0'
+ # Allow connections from tin, fenari, & localhost:
+ cidr =>
'::ffff:10.64.0.196/128,::ffff:208.80.152.165/128,::ffff:127.0.0.1/128',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/61931
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib33d3cc666f9c1ca0848ae067f3047d8b7939d3e
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
