1047629 - please allow a couple of machines to access r5-mini-002.srv.releng.scl3.mozilla.com

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[[e-mail] (:bhearsum)]

In order to complete testing of some changes to our signing server I need to run a real build machine + master against the test instance set-up on this machine. The specific flows I need are:
dev-master1.srv.releng.scl3.mozilla.com (10.26.48.25)
 -> r5-mini-002.srv.releng.scl3.mozilla.com (10.26.49.30), tcp/9100

bld-lion-r5-092.build.releng.scl3.mozilla.com (10.26.52.112)
 -> r5-mini-002.srv.releng.scl3.mozilla.com (10.26.49.30), tcp/9100

Comment 1

[Ryan Watson [:w0ts0n]]

This can wait until Monday? It's paging on call. I am moving priority down.

Comment 2

[Dave Curado :dcurado]

For the first of these two policy requests, from dev-master1.srv to r5-mini-002.srv, both of those
devices are on the same vlan.  Packets from one to the other will not go through the firewall, so
no additional security policy is needed.

For the second, I have put a security policy in place, and hopefully you're all set.
If there are any problems, please let me know?
Thanks -- Dave

  From zone: build, To zone: srv
  Source addresses:
    bld-lion-r5-092: 10.26.52.112/32
  Destination addresses:
    r5-mini-002: 10.26.49.30/32
  Application: tcp-9100
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0] 
      Destination port range: [9100-9100]

Comment 3

[[e-mail] (:bhearsum)]

Thank you!