Closed
Bug 1259418
Opened 10 years ago
Closed 10 years ago
remove acls for nagios[12].stage.phx1
Categories
(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)
Infrastructure & Operations Graveyard
NetOps: DC ACL Request
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: Usul, Assigned: dcurado)
Details
[ludo@Oulanl configurations-archives]$ grep -r 10.8.75.20 .
./fw1.ops.scl3.mozilla.net.conf: address nagios1.stage.private.phx1 10.8.75.20/32;
[ludo@Oulanl configurations-archives]$ grep -r 10.8.75.18 .
./fw1.ops.scl3.mozilla.net.conf: address nagios2.stage.private.phx1 10.8.75.18/32;
| Assignee | ||
Comment 1•10 years ago
|
||
working on this
Assignee: network-operations → dcurado
Status: NEW → ASSIGNED
| Assignee | ||
Comment 2•10 years ago
|
||
OK, here's what I deleted from fw1.scl3:
dcurado@fw1.ops.scl3.mozilla.net> show configuration | compare rollback 1 | no-more
[edit groups global-policies security policies from-zone private to-zone <*> policy nagios-all match]
- source-address [ nagios1.private.scl3 nagios2.private.scl3 nagios1.private.phx1 nagios1-v6.private.phx1 nagios3.private.scl3 nagios1.stage.private.phx1 nagios2.stage.private.phx1 ];
- destination-address any;
- application any;
+ source-address [ nagios1.private.scl3 nagios2.private.scl3 nagios1.private.phx1 nagios1-v6.private.phx1 nagios3.private.scl3 ];
+ destination-address any;
+ application any;
[edit groups vendor-vlan-policies security policies from-zone private to-zone <*> policy nagios-all match]
- source-address [ nagios1.private.scl3 nagios2.private.scl3 nagios1.private.phx1 nagios1-v6.private.phx1 nagios1.stage.private.phx1 nagios2.stage.private.phx1 ];
- destination-address any;
- application any;
+ source-address [ nagios1.private.scl3 nagios2.private.scl3 nagios1.private.phx1 nagios1-v6.private.phx1 ];
+ destination-address any;
+ application any;
[edit security policies from-zone private to-zone db policy neo-global-nagios-all match]
- source-address [ admin1.private.phx1 admin1a.private.phx1 admin1b.private.phx1 nagios1.private.phx1 nagios1.stage.private.phx1 ];
- destination-address any;
- application any;
+ source-address [ admin1.private.phx1 admin1a.private.phx1 admin1b.private.phx1 nagios1.private.phx1 ];
+ destination-address any;
+ application any;
[edit security policies from-zone private to-zone ateam policy neo-ateam-nagios match]
- source-address [ admin1a.private.phx1 admin1b.private.phx1 nagios1.private.phx1 nagios1.stage.private.phx1 ];
- destination-address neo-ateam.ateam.scl3--net;
- application any;
+ source-address [ admin1a.private.phx1 admin1b.private.phx1 nagios1.private.phx1 ];
+ destination-address neo-ateam.ateam.scl3--net;
+ application any;
[edit security policies from-zone private to-zone neo-bughunter policy neo-bughunter-nagios-phx1 match]
- source-address [ nagios1.private.phx1 admin1a.private.phx1 admin1b.private.phx1 nagios1.stage.private.phx1 ];
- destination-address any;
- application any;
+ source-address [ nagios1.private.phx1 admin1a.private.phx1 admin1b.private.phx1 ];
+ destination-address any;
+ application any;
[edit security zones security-zone private address-book]
- address nagios1.stage.private.phx1 10.8.75.20/32;
- address nagios2.stage.private.phx1 10.8.75.18/32;
| Assignee | ||
Updated•10 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Updated•3 years ago
|
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•