Skip to content

Firewall settings for webhook towards Jenkins #24684

Discussion options

You must be logged in to vote

The issue in the end was in the rule hierarchy.

As mentioned my nginx server blocks everything (DROP) based on CIDR zone list I fetch from the internet.
A bash script weekly updates the before.rules accordingly together with fail2ban etc…

Anyway the extra rules I added as mentioned in the opening post where applied AFTER I already dropped the packages… so they never made it in obviously.
Adapted my bash script to skip the creation of the DROP rule for the IP’s delivered by the Github API.

All works well now.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
1 participant