dont block intra-container communication for the same job

internetarchive · Nov 1, 2024 · 11c4dab · 11c4dab
1 parent 5bbec11
commit 11c4dab
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bin/ports-unblock.sh b/bin/ports-unblock.sh
@@ -52,7 +52,7 @@ proto tcp                                      mod conntrack ctorigdstport 20000
 saddr      $CLUSTER proto tcp dport 20000:45000 ACCEPT;
 saddr 172.17.0.0/16 proto tcp dport 20000:45000 ACCEPT;
 saddr  10.88.0.0/16 proto tcp dport 20000:45000 ACCEPT;
-                    proto tcp dport 20000:45000 REJECT;
+                  # proto tcp dport 20000:45000 REJECT; # xxx figure out why
 ' |sudo tee $INTRA