Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
emulab
emulab-devel
Commits
32adb956
Commit
32adb956
authored
Mar 31, 2014
by
Leigh B Stoller
Browse files
Ack, the client side subsitution code is too blunt, had to change the
names.
parent
5ab5f8d5
Changes
2
Hide whitespace changes
Inline
Side-by-side
firewall/initfwvars.pl.in
View file @
32adb956
...
@@ -177,12 +177,12 @@ if ($VIRTNODE_NETWORK =~ /^(\d+\.\d+\.\d+)\.0$/) {
...
@@ -177,12 +177,12 @@ if ($VIRTNODE_NETWORK =~ /^(\d+\.\d+\.\d+)\.0$/) {
#
#
# Sorry these are hardwired.
# Sorry these are hardwired.
#
#
my
$EMULAB_VC
NET_
BOSS
=
"
172.17.254.254
";
my
$EMULAB_VCBOSS
=
"
172.17.254.254
";
my
$EMULAB_VC
NET_
OPS
=
"
172.17.253.254
";
my
$EMULAB_VCOPS
=
"
172.17.253.254
";
$str
=
"
replace into default_firewall_vars values
"
.
$str
=
"
replace into default_firewall_vars values
"
.
"
('EMULAB_VC
NET_
BOSS', '
$EMULAB_VC
NET_
BOSS
'),
"
.
"
('EMULAB_VCBOSS', '
$EMULAB_VCBOSS
'),
"
.
"
('EMULAB_VC
NET_
OPS', '
$EMULAB_VC
NET_
OPS
')
";
"
('EMULAB_VCOPS', '
$EMULAB_VCOPS
')
";
print
"
$str
\n
"
print
"
$str
\n
"
if
(
!
$doit
);
if
(
!
$doit
);
...
...
firewall/iptables-fw-domU-rules
View file @
32adb956
...
@@ -83,7 +83,7 @@ iptables -A OUTSIDE -s EMULAB_GWIP,EMULAB_VGWIP -j ACCEPT # BASIC,CLOSED,ELABINE
...
@@ -83,7 +83,7 @@ iptables -A OUTSIDE -s EMULAB_GWIP,EMULAB_VGWIP -j ACCEPT # BASIC,CLOSED,ELABINE
# On a non-segmented control network (like an IG rack), boss/ops
# On a non-segmented control network (like an IG rack), boss/ops
# have aliases on the virtual node network. Allows these though.
# have aliases on the virtual node network. Allows these though.
iptables -A OUTSIDE -s EMULAB_VC
NET_
BOSS,EMULAB_VC
NET_
OPS -j ACCEPT # BASIC,CLOSED,ELABINELAB
iptables -A OUTSIDE -s EMULAB_VCBOSS,EMULAB_VCOPS -j ACCEPT # BASIC,CLOSED,ELABINELAB
#
#
# No one on the inside can talk to other experiments' nodes and visa-versa.
# No one on the inside can talk to other experiments' nodes and visa-versa.
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment