]>
git.donarmstrong.com Git - dsa-puppet.git/log
Stephen Gran [Sun, 21 Mar 2010 09:30:04 +0000 (09:30 +0000)]
restrict schroeder sshSigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 20 Mar 2010 23:42:15 +0000 (00:42 +0100)]
Remove schroeder's motd notice about /etc/rc.boot/firewall{,6}
Peter Palfrader [Sat, 20 Mar 2010 23:26:17 +0000 (00:26 +0100)]
And once more
Peter Palfrader [Sat, 20 Mar 2010 23:25:23 +0000 (00:25 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Peter Palfrader [Sat, 20 Mar 2010 23:25:18 +0000 (00:25 +0100)]
I wonder if that makes puppet work
Martin Zobel-Helas [Sat, 20 Mar 2010 17:53:07 +0000 (18:53 +0100)]
add gabrielli.debian.org
Martin Zobel-Helas [Thu, 18 Mar 2010 21:39:22 +0000 (22:39 +0100)]
add apt-in-chroot to allowed sudo commands
Martin Zobel-Helas [Thu, 18 Mar 2010 18:35:57 +0000 (19:35 +0100)]
add missing archs
Martin Zobel-Helas [Thu, 18 Mar 2010 16:29:47 +0000 (17:29 +0100)]
make porter stuff a bit nicer
Martin Zobel-Helas [Thu, 18 Mar 2010 15:48:45 +0000 (16:48 +0100)]
play with porter commands
Peter Palfrader [Thu, 18 Mar 2010 13:53:00 +0000 (14:53 +0100)]
%debian-cd gets sudo to debian-cd
Peter Palfrader [Thu, 18 Mar 2010 13:09:19 +0000 (14:09 +0100)]
Move logrotate dependency from apache to debian-org
Peter Palfrader [Thu, 18 Mar 2010 12:59:20 +0000 (13:59 +0100)]
puppet does not like requiring the same package twice, apparently
Peter Palfrader [Thu, 18 Mar 2010 12:58:16 +0000 (13:58 +0100)]
ulogd logs: Rotate daily, compress them (delayed), and keep 10, but do not rotate empty files
Peter Palfrader [Thu, 18 Mar 2010 12:56:08 +0000 (13:56 +0100)]
puppet header
Peter Palfrader [Thu, 18 Mar 2010 12:55:49 +0000 (13:55 +0100)]
Add logrotate.d/ulogd
Stephen Gran [Thu, 18 Mar 2010 12:06:24 +0000 (12:06 +0000)]
add nixon key for petterssonSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 16 Mar 2010 23:48:14 +0000 (23:48 +0000)]
stupid net-lsearch typeSigned-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Tue, 16 Mar 2010 11:46:54 +0000 (12:46 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Tue, 16 Mar 2010 11:46:23 +0000 (12:46 +0100)]
disable dns_ipv4_lookup upon sgrans request
Stephen Gran [Mon, 15 Mar 2010 13:12:04 +0000 (13:12 +0000)]
allow local_part_suffixes in procmail routerSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 23:54:50 +0000 (23:54 +0000)]
enable the nf_ftp_conntrack hookSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:59:51 +0000 (17:59 +0000)]
stop serving a broken file for nowSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:55:49 +0000 (17:55 +0000)]
and let's try pointing at the right fileSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:53:35 +0000 (17:53 +0000)]
and the inevitable syntax errorSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:52:03 +0000 (17:52 +0000)]
a stab at auto loading conntrack modulesSigned-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Mon, 8 Mar 2010 13:34:57 +0000 (14:34 +0100)]
Revert "lets load nf_conntrack_ftp on buildds"
This reverts commit
1689c9c9a7ca632ec433fd952ce19b9bd254a3bb .
Martin Zobel-Helas [Mon, 8 Mar 2010 13:32:21 +0000 (14:32 +0100)]
lets load nf_conntrack_ftp on buildds
Stephen Gran [Mon, 8 Mar 2010 00:07:08 +0000 (00:07 +0000)]
add ferm to tchaikovskySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 00:01:43 +0000 (00:01 +0000)]
restrict ssh to tchaikovskySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:35:26 +0000 (23:35 +0000)]
v6 rule is v6Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:28:25 +0000 (23:28 +0000)]
handel gets a firewallSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:21:49 +0000 (23:21 +0000)]
try not to double include rietz when we do puppetize itSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 22:44:38 +0000 (22:44 +0000)]
add rietz back into muninSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 21:59:00 +0000 (21:59 +0000)]
match subnets that might existSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 21:38:56 +0000 (21:38 +0000)]
add https ferm rule to apache class for nowSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:52:24 +0000 (20:52 +0000)]
munin must run ip6 plugin as root as wellSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:40:54 +0000 (20:40 +0000)]
make v6ips fail more gracefullySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:36:01 +0000 (20:36 +0000)]
get package name rightSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:34:19 +0000 (20:34 +0000)]
reshuffle where template is served fromSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:29:38 +0000 (20:29 +0000)]
bandwidth graphs for v6Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:28:18 +0000 (20:28 +0000)]
alphabetizeSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:25:03 +0000 (20:25 +0000)]
some whitespace cleanup and move template to base classSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:24:16 +0000 (20:24 +0000)]
handle lack of v6 addresses nicelySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 15:30:45 +0000 (15:30 +0000)]
some more no_munin hostsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 13:00:11 +0000 (13:00 +0000)]
more whitespaceSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 12:36:47 +0000 (12:36 +0000)]
whitespace naziSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 11:57:04 +0000 (11:57 +0000)]
get rid of way too many munin subclassesSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 11:23:26 +0000 (11:23 +0000)]
confine ip addr fact to linuxSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:57:39 +0000 (10:57 +0000)]
yes, picky painSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:56:52 +0000 (10:56 +0000)]
since we log to ulog, we should probably install itSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:43:29 +0000 (10:43 +0000)]
erm, time is tcp, ntp is udpSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:41:25 +0000 (10:41 +0000)]
sighSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:39:19 +0000 (10:39 +0000)]
picky pickySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:37:41 +0000 (10:37 +0000)]
allow time for ancina and zelenkaSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 09:39:57 +0000 (09:39 +0000)]
some more ferm fixupsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 09:25:30 +0000 (09:25 +0000)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 7 Mar 2010 09:25:20 +0000 (09:25 +0000)]
buildd get minimal firewallsSigned-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 7 Mar 2010 09:22:42 +0000 (10:22 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 7 Mar 2010 09:20:19 +0000 (10:20 +0100)]
lets try the first buildd: ball
Stephen Gran [Sun, 7 Mar 2010 09:00:53 +0000 (09:00 +0000)]
this should be coolSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:35:56 +0000 (08:35 +0000)]
Revert "we want counters"
This reverts commit
f2f9d3efab7262bbdfb4e51feebfa6bd8aebc9a8 .
Stephen Gran [Sun, 7 Mar 2010 08:32:59 +0000 (08:32 +0000)]
get the ferm variable rightSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:31:55 +0000 (08:31 +0000)]
and add a nop rule for muninSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:23:48 +0000 (08:23 +0000)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 7 Mar 2010 08:23:42 +0000 (08:23 +0000)]
new ipaddress factSigned-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 7 Mar 2010 07:15:52 +0000 (08:15 +0100)]
steffani being a recursor
Martin Zobel-Helas [Sat, 6 Mar 2010 21:49:04 +0000 (22:49 +0100)]
add steffani to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 21:24:28 +0000 (22:24 +0100)]
add wieck to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 20:36:15 +0000 (21:36 +0100)]
schein runs a local dns
Martin Zobel-Helas [Sat, 6 Mar 2010 20:30:01 +0000 (21:30 +0100)]
add schein
Martin Zobel-Helas [Sat, 6 Mar 2010 20:15:43 +0000 (21:15 +0100)]
add raff+gluck to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 19:27:54 +0000 (20:27 +0100)]
add lobos to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 19:24:09 +0000 (20:24 +0100)]
add villa to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 18:30:55 +0000 (19:30 +0100)]
remove obsolete modules
Martin Zobel-Helas [Sat, 6 Mar 2010 18:30:41 +0000 (19:30 +0100)]
we want counters
Martin Zobel-Helas [Sat, 6 Mar 2010 18:14:34 +0000 (19:14 +0100)]
ah, : missing
Martin Zobel-Helas [Sat, 6 Mar 2010 18:10:37 +0000 (19:10 +0100)]
typo?
Martin Zobel-Helas [Sat, 6 Mar 2010 18:04:50 +0000 (19:04 +0100)]
saens alone
Martin Zobel-Helas [Sat, 6 Mar 2010 18:02:15 +0000 (19:02 +0100)]
move ftp and rsync to site.pp
Martin Zobel-Helas [Sat, 6 Mar 2010 17:41:50 +0000 (18:41 +0100)]
add module ftp
Martin Zobel-Helas [Sat, 6 Mar 2010 17:38:29 +0000 (18:38 +0100)]
weasel is always right
Martin Zobel-Helas [Sat, 6 Mar 2010 17:36:57 +0000 (18:36 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sat, 6 Mar 2010 17:30:55 +0000 (18:30 +0100)]
start ferm'ing security mirrors
Stephen Gran [Sat, 6 Mar 2010 15:33:07 +0000 (15:33 +0000)]
see if global_variables worksSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:31:59 +0000 (15:31 +0000)]
and not cause a syntax errorSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:31:14 +0000 (15:31 +0000)]
and actually ship itSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:29:49 +0000 (15:29 +0000)]
add first stab at interfacesSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:37:07 +0000 (13:37 +0000)]
try in place array, but with bonus for syntactic correctnessSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:36:00 +0000 (13:36 +0000)]
try in place arraySigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:33:19 +0000 (13:33 +0000)]
restore stunnel ruleSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:28:12 +0000 (13:28 +0000)]
humphSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:23:13 +0000 (13:23 +0000)]
first stab at http limit rules - how bad can it go?Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:07:50 +0000 (13:07 +0000)]
piatti has fermSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 12:57:43 +0000 (12:57 +0000)]
let's see if this worksSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 12:53:53 +0000 (12:53 +0000)]
Revert "first stab at opening firewall for actual mail port"
This reverts commit
8aa9460c4f37da95c931dd25eb2b3ab0512f6afd .
Stephen Gran [Sat, 6 Mar 2010 12:53:47 +0000 (12:53 +0000)]
Revert "er, not a case statement"
This reverts commit
14275a7a8892845f59f12a86945da4c7effc643c .
Stephen Gran [Sat, 6 Mar 2010 12:51:27 +0000 (12:51 +0000)]
er, not a case statementSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 12:50:48 +0000 (12:50 +0000)]
first stab at opening firewall for actual mail portSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 12:50:29 +0000 (12:50 +0000)]
add submission for mx machinesSigned-off-by: Stephen Gran <steve@lobefin.net>
projects / dsa-puppet.git / log