Project

General

Profile

Bug #505

Bug #503: Orfeo: new IPv4

Orfeo: Remove old IPv4

Added by Pierre-Louis Bonicoli over 2 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
DC Admins
Category:
System :: Network
Start date:
2017-02-06
Due date:
% Done:

100%

Estimated time:
(Total: 0:00 h)
Patch Available:
Confirmed:
Yes
Branch:
Entity:
DuckCorp
Security:
No
Help Needed:

Description

New IPv4 had been added, 193.17.192.211 can be removed.

Orfeo

  • [X] postfix (ansible not used)
    • /etc/postfix/helo_overrides.cf updated, apply modification using: postmap /etc/postfix/helo_overrides.cf
    • /etc/postfix/main.cf updated, apply modification using: systemctl reload postfix
  • [X] dspam (ansible not used)
    • /etc/dspam/dspam.conf updated, apply modification using systemctl reload dspam.service
  • [X] ircd-ratbox (ansible not used)
    • /etc/ircd-ratbox/common_exempts.conf and /etc/ircd-ratbox/ircd.conf updated, apply modification with systemctl restart ircd-ratbox.service
  • [X] bind (ansible not used)
    • /etc/bind/named.conf, apply modification with systemctl restart bind9.service

Jinta

  • [X] Apply ansible on this host, the following files will be updated:
    • /etc/fail2ban/jail.conf and /etc/resolv.conf
  • [X] ircd-ratbox (ansible not used)
    • /etc/ircd-ratbox/common_exempts.conf, modification applied using systemctl reload ircd-ratbox.service

Toushirou

  • [X] Apply ansible on this host, the following files will be updated:
    • /etc/fail2ban/jail.conf and /etc/resolv.conf
  • [X] bind
    • /etc/bind/named.conf, apply modification with systemctl restart bind9.service
  • [X] postfix (ansible not used)
    • /etc/postfix/main.cf updated, apply modification using: systemctl reload postfix

Thorfinn

  • [X] Apply ansible on this host, the following files will be updated:
    • /etc/fail2ban/jail.conf and /etc/resolv.conf

Korutopi

Nothing to do.


Subtasks

Bug #506: Review branch orfeo_remove_old_ipResolvedMarc Dequènes

Actions
Bug #512: Orfeo - postfix - remove workaroundResolvedPierre-Louis Bonicoli

Actions

History

#1

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Description updated (diff)
  • Due date set to 2017-02-10
  • Start date changed from 2017-02-06 to 2017-02-10
  • Confirmed changed from No to Yes
#2

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Description updated (diff)
#3

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Description updated (diff)
#4

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Description updated (diff)
#5

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Description updated (diff)
  • Status changed from New to In Progress

Ansible configuration applied using commit 2d8eab4a7605168a518ea148a2fdf3491d1081f3 and the following command:

ansible-playbook -i hosts -t interfaces,firewalling -l Jinta,Orfeo,Thorfinn,Toushirou playbooks/dc.yml

#6

Updated by Pierre-Louis Bonicoli over 2 years ago

The address need to be manually deleted using ip a d 193.17.192.211 dev eth0, then minbif and prosody services and the irssi instance of HappyPeng must be restarted.

netstat -ntpu |grep 193.17.192.211|grep EST
tcp        0      0 193.17.192.211:52128    XXX.XXX.XXX.XXX:6667      ESTABLISHED 14580/irssi     
tcp        0      0 193.17.192.211:57551    XXX.XXX.XXX.XXX:5269      ESTABLISHED 7642/lua5.1          
tcp        0      0 193.17.192.211:37826    XXX.XXX.XXX.XXX:5222       ESTABLISHED 2067/minbif

#7

Updated by Pierre-Louis Bonicoli over 2 years ago

  • Category set to System :: Network
  • Status changed from In Progress to Resolved
  • Security set to No

irssi instance isn't using the old IPv4 anymore.

Old IP and route removed using

ip a d 193.17.192.211/28 dev eth0
ip route replace default via 193.200.43.110@

prosody and minbif restarted using:

systemctl restart prosody
systemctl restart minbif

Also available in: Atom PDF