Maniphest T194603

ores-beta lacking a firewall rule to allow port 8081
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	awight
	May 13 2018, 6:37 PM

Description

This prevents our web proxy from working. I worked around by running iptables, but seems that I lost some important puppet role. I explicitly applied profile::ores::web, which includes a ferm declaration that should have done the job, but it did not.

Event Timeline

awight created this task.May 13 2018, 6:37 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 13 2018, 6:37 PM

Workaround to apply every boot until this is resolved:

iptables -A INPUT -p tcp --dport 8081 -j ACCEPT

Weird punchline... I added another of the production roles cos we think there are messy interdependencies, and after rebooting, the result was *no* iptables firewall. That's bizarre but fine for now.

awight edited projects, added Machine-Learning-Team; removed Machine-Learning-Team (Active Tasks).Jun 18 2018, 1:58 PM

awight moved this task from Unsorted to Maintenance/cleanup on the Machine-Learning-Team board.Jun 20 2018, 2:48 PM

• Vvjjkkii renamed this task from ores-beta lacking a firewall rule to allow port 8081 to o1caaaaaaa.Jul 1 2018, 1:10 AM

• Vvjjkkii triaged this task as High priority.

• Vvjjkkii added projects: CheckUser, Connected-Open-Heritage-Batch-uploads (RAÄ-KMB_1_2017-02), Tamil-Sites, Gamepress, Hashtags, Jade, KartoEditor, Language-2018-Apr-June, New-Editor-Experiences, Mail, TCB-Team (now WMDE-TechWish).

• Vvjjkkii updated the task description. (Show Details)

• Vvjjkkii removed a subscriber: Aklapper.

CommunityTechBot renamed this task from o1caaaaaaa to ores-beta lacking a firewall rule to allow port 8081.Jul 2 2018, 4:14 PM

CommunityTechBot raised the priority of this task from High to Needs Triage.

CommunityTechBot updated the task description. (Show Details)

CommunityTechBot removed projects: TCB-Team (now WMDE-TechWish), Mail, New-Editor-Experiences, Language-2018-Apr-June, KartoEditor, Jade, Hashtags, Gamepress, Tamil-Sites, Connected-Open-Heritage-Batch-uploads (RAÄ-KMB_1_2017-02), CheckUser.

CommunityTechBot added a subscriber: Aklapper.

Isn't it fixed?

Ladsgroup claimed this task.Nov 28 2018, 6:11 AM

Ladsgroup edited projects, added Machine-Learning-Team (Active Tasks); removed Machine-Learning-Team.

Restricted Application added a project: User-Ladsgroup. · View Herald TranscriptNov 28 2018, 6:11 AM

I just added web security group to the node in horizon which opens the ports from 8000 - 8100

ores-beta lacking a firewall rule to allow port 8081Closed, ResolvedPublicActions

Description

Event Timeline

ores-beta lacking a firewall rule to allow port 8081
Closed, ResolvedPublic
Actions