#8 allow irods.icat.db_port to icat

DICE-UNC · Mar 9, 2016 · 4d3747d · 4d3747d
1 parent c4d8af2
commit 4d3747d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ansible/roles/iptables/templates/iptables.j2 b/ansible/roles/iptables/templates/iptables.j2
@@ -108,6 +108,7 @@
 -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.trust }} --dport {{ irods.port }} -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.trust }} --dport {{ irods.portrange }} -j ACCEPT
 -A INPUT -m state --state NEW -m udp -p udp -s {{ net.trust }} --dport {{ irods.portrange }} -j ACCEPT
+-A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ irods.icat.db_port }} -J ACCEPT
 {% endif %}
 
 {% if inventory_hostname in groups['jex'] %}