james/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

proxies: block ip thats hitting a pr endpoint

Browse source 
This ip is posting to /rpms/seahorse/pull-request/5/comment?js=1
about 400k times a day.

It may be a script gone wrong or something.
Remove the block if the user says they fixed it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-11-16 13:00:20 -08:00
commit de4be8f8cc
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/proxies
View file

@ -64,6 +64,7 @@ nft_block_rules:
- 'add rule ip filter INPUT ip saddr 152.53.36.0/24 counter reject'
- 'add rule ip filter INPUT ip saddr 66.249.69.0/24 counter reject'
- 'add rule ip filter INPUT ip saddr 159.138.218.0/24 counter reject'
- 'add rule ip filter INPUT ip saddr 188.75.180.46/32 counter reject'
nft_custom_rules:
# Need for rsync from log01 for logs.
- 'add rule ip filter INPUT ip saddr 10.16.163.39 tcp dport 873 counter accept'