From 67a4905a0a9583683c8242200fe2c3a1c378933c Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Wed, 4 Oct 2023 08:19:09 +0200 Subject: [PATCH] Don't log SLURM connection attempts from ssfhead --- m/common/net.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/m/common/net.nix b/m/common/net.nix index d90f8ba..1c9c569 100644 --- a/m/common/net.nix +++ b/m/common/net.nix @@ -23,7 +23,7 @@ allowedTCPPorts = [ 22 ]; extraCommands = '' # Prevent ssfhead from contacting our slurmd daemon - iptables -A nixos-fw -p tcp -s ssfhead --dport 6817:6819 -j nixos-fw-log-refuse + iptables -A nixos-fw -p tcp -s ssfhead --dport 6817:6819 -j nixos-fw-refuse # But accept traffic to slurm ports from any other node in the subnet iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 6817:6819 -j nixos-fw-accept # We also need to open the srun port range