#2 iptables tweaks

DICE-UNC · Mar 9, 2016 · d18d75b · d18d75b
1 parent d82e099
commit d18d75b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ansible/roles/iptables/templates/iptables.j2 b/ansible/roles/iptables/templates/iptables.j2
@@ -171,6 +171,13 @@
 -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ user_preferences.port }} -j ACCEPT
 {% endif %}
 
+
+{% if inventory_hostname in groups['user-sessions'] %}
+# user-preferences port from DMZ
+-A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ user_sessions.port }} -j ACCEPT
+{% endif %}
+
+
 {% if inventory_hostname in groups['ui'] %}
 # http and https, campus for now
 -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.campus }} --dport 80 -j ACCEPT