751636 - addonsadm.private.phx1->mxr-processor1.private.scl3, port 22

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task, P1)

Description

[Jake Maul [:jakem]]

+++ This bug was initially created as a clone of Bug #751305 +++

In order for MXR to index the addons content, the addons files need to be rsync'd to it. These are stored on NetApp in PHX1. This is a push script using rsync-over-ssh, so addonsadm needs access to mxr-processor1, but not the other way around.

source: addonsadm.private.phx.mozilla.com, any/tcp
dest:   mxr-processor1.private.scl3.mozilla.com, 22/tcp

This blocks us from moving mxr to scl3 (out of sjc1).

Note that there should already be a rule like this with the destination being dm-webtools04.mozilla.org. That can stay, it's still currently the active node for a while longer.

Comment 1

[casey ransom [:casey]]

the flow is open, though addonsadm's sshd is in a broken state and I can't log in to verify.
[[e-mail]1 ~]$ ssh -vvv  addonsadm.private.phx1
OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to addonsadm.private.phx1 [10.8.75.37] port 22.
debug1: Connection established.
debug1: identity file /home/cransom/.ssh/identity type -1
debug1: identity file /home/cransom/.ssh/id_rsa type -1
debug1: identity file /home/cransom/.ssh/id_dsa type -1

Comment 2

[Jake Maul [:jakem]]

oremj fixed that, and I've verified that this is working properly. Thanks!