[mirror-admin] Blocking ips on dl.fedoraproject.org (Or Please update your mirrors in mirror-manager)

[Carlos]

Stephen John Smoogen (smooge at gmail.com) wrote on Tue, Mar 29, 2016 at 12:29:28PM BRT:
> On 28 March 2016 at 16:46, Carlos <carlos at inf.ufpr.br> wrote:
> > Mirrormanager asks for the site name and the IPs of the rsync servers. This
> > doesn't mean they should be the same machine. In our case it is, but it has
> > several IPs. All you should check is if the IPs used are those in mirrormanager
> > for the site.
> >
> 
> But I am not seeing the ip listed in mirrormanager.

Well, when I log in mirrormanager and go to the "My Sites" tab and click
fedora.c3sl.ufpr.br I see "Master rsync server Access Control List IPs" and
"These host DNS names and/or IP addresses will be allowed to rsync from the
master rsync/ftp servers. List here all the machines that you use for pulling."
It shows the one IPv4 and the one IPv6 we use for pulling.

So I think all is already there. From the mirrormanager database you can build
a machine-readable access list automatically like Jan suggests. You can use
whatever criteria to select which sites will have access to the master and look
for the corresponding addresses to put in the access list.

--