Mercurial > repos > other > Puppet
changeset 323:002203790815
Stop running Great Firewall Against China on IPv6 machines
We only have IPv4 addresses, which we can't firewall on an IPv6
machine. May need an alternative later.
| author | IBBoard <dev@ibboard.co.uk> |
|---|---|
| date | Sun, 01 Mar 2020 11:00:19 +0000 |
| parents | 06a401d3ef45 |
| children | b0928653dfc2 |
| files | manifests/templates.pp |
| diffstat | 1 files changed, 3 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/manifests/templates.pp Sun Mar 01 10:59:38 2020 +0000 +++ b/manifests/templates.pp Sun Mar 01 11:00:19 2020 +0000 @@ -795,8 +795,11 @@ hour => "4", minute => "9" } + # Only run the Great Firewall Against China on IPv4 (since we don't have an IPv6 list + # and the PROXY forwards the IPs to services, but not at the network level) cron { 'greatfirewallofchina': command => '/usr/local/bin/update-great-firewall-of-china', + ensure => has_key($facts, 'ipaddress') ? { true => "present", default => "absent" }, hour => 3, minute => 30 }