[PATCH] add ip6tables on DNS servers

[Mike McGrath]

On Fri, 28 Aug 2009, Jerald Darow wrote:

> Matt why are you spamming the list
>

He's trying to make sure these changes (there's a lot of them) don't break
the world.  And since we can't really test these in staging he's getting
as many eyes on it as he can.

	-Mike

> ----- Original Message ----- From: "Matt Domsch" <Matt_Domsch at dell.com>
> To: <fedora-infrastructure-list at redhat.com>
> Sent: Friday, August 28, 2009 5:11 PM
> Subject: [PATCH] add ip6tables on DNS servers
>
>
> > From: Matt Domsch <mdomsch at puppet1.fedora.phx.redhat.com>
> >
> > ---
> > manifests/servergroups/dns.pp |    9 +++++++++
> > 1 files changed, 9 insertions(+), 0 deletions(-)
> >
> > diff --git a/manifests/servergroups/dns.pp b/manifests/servergroups/dns.pp
> > index 0b543b2..01b5a60 100644
> > --- a/manifests/servergroups/dns.pp
> > +++ b/manifests/servergroups/dns.pp
> > @@ -12,11 +12,20 @@ class dns {
> >             content => template('system/iptables-template.conf.erb'),
> >     }
> >
> > +    ip6tables { '/etc/sysconfig/ip6tables':
> > +            content => template('system/ip6tables-template.conf.erb'),
> > +    }
> > +
> >     service { iptables:
> >         ensure => running,
> >         hasstatus => true,
> >     }
> >
> > +    service { ip6tables:
> > +        ensure => running,
> > +        hasstatus => true,
> > +    }
> > +
> >     semanage_fcontext { '/var/named/chroot/log(/.*)?':
> >         type => 'named_log_t'
> >     }
> > --
> > 1.5.5.6
> >
> > _______________________________________________
> > Fedora-infrastructure-list mailing list
> > Fedora-infrastructure-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
>
> _______________________________________________
> Fedora-infrastructure-list mailing list
> Fedora-infrastructure-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
>