From 9222cfd1ac5b69ba2ee4a5026dd6d9a188ee6e43 Mon Sep 17 00:00:00 2001 From: Sergio Oliveira Date: Mon, 4 May 2015 18:41:05 -0300 Subject: [PATCH] Allow integration host connect to social host on HTTP ports --- cookbooks/firewall/templates/host-social/iptables-filter.erb | 3 +++ 1 file changed, 3 insertions(+), 0 deletions(-) create mode 100644 cookbooks/firewall/templates/host-social/iptables-filter.erb diff --git a/cookbooks/firewall/templates/host-social/iptables-filter.erb b/cookbooks/firewall/templates/host-social/iptables-filter.erb new file mode 100644 index 0000000..6cca31c --- /dev/null +++ b/cookbooks/firewall/templates/host-social/iptables-filter.erb @@ -0,0 +1,3 @@ + +# Allow integration connect to HTTP +-A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW -m multiport --dports 80,443 -j ACCEPT -- libgit2 0.21.2