CHANGE Request: iptables on builders for ntp

[Jon Stanley]

On Mon, May 17, 2010 at 10:49 PM, Dennis Gilmore <dennis at ausil.us> wrote:
> we need to allow the builders to talk to the ntp servers to make sure they
> have correct time.
>
> diff --git a/manifests/servergroups/build.pp b/manifests/servergroups/build.pp
> index 0c222ef..181ce5c 100644
> --- a/manifests/servergroups/build.pp
> +++ b/manifests/servergroups/build.pp
> @@ -18,6 +18,10 @@ class build {
>         custom => [ '-A OUTPUT -d 127.0.0.0/8 -j ACCEPT',
>                 '-A OUTPUT -d 10.0.0.0/8 -j ACCEPT',
>                 '-A OUTPUT -d 209.132.176.0/24 -j ACCEPT',
> +                '-A OUTPUT -m udp -p udp -dport 123 -d 66.187.233.4 -j
> ACCEPT',
> +                '-A OUTPUT -m udp -p udp -dport 123 -d 192.43.244.18 -j
> ACCEPT',
> +                '-A OUTPUT -m udp -p udp -dport 123 -d 128.118.25.5 -j
> ACCEPT',
> +                '-A OUTPUT -m udp -p udp -dport 123 -d 204.152.184.72 -j
> ACCEPT',
>                 '-A OUTPUT -m tcp -p tcp -j REJECT',
>                 '-A OUTPUT -m udp -p udp -j REJECT' ]
>     }

+1