opendev/system-config
Code Issues Proposed changes

Allow DNS zone transfers from ns1/ns2.opendev.org

Browse Source 
This was likely missed in bootstrapping. Temporarily allow all
authoritative slaves (opendev as well as openstack) to perform zone
transfers over 53/tcp on either silent master nameserver.

Change-Id: I68455a1d4fa5042da14b3c2e0747af00effad0da
This commit is contained in:
Jeremy Stanley 2019-01-02 16:31:56 +00:00
parent 83b493648a
commit 49601213fe
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
playbooks/group_vars/adns.yaml
View File

@ -1,4 +1,10 @@
iptables_extra_allowed_hosts: iptables_extra_allowed_hosts:
- protocol: tcp
port: 53
hostname: ns1.opendev.org
- protocol: tcp
port: 53
hostname: ns2.opendev.org
- protocol: tcp - protocol: tcp
port: 53 port: 53
hostname: ns1.openstack.org hostname: ns1.openstack.org