Change Details

vagrant provision admin-rp1: -> following new vhost is generated: Refuse access with: ``` root@rp1:/etc/varnish/includes# cat 90_vhost_forbidden_access_swh-rproxy3.inria.fr.vclcurl --insecure https://10.168.50.20 # vhost_forbidden_access_swh-rproxy3.inria.fr.vcl<!DOCTYPE html> #<html> # Settings for swh-rproxy3.inria.fr vhost to refuse access <head> # <title>403 Forbidden access to unknown vhost 10.168.50.20</title> # File managed by puppet. All modifications will be lost. sub vcl_recv { </head> <body> if (<h1>Error 403 Forbidden access to unknown vhost 10.168.50.20</h1> req.http.host ~ "^(?i)128\.93\.166\.10(:[0-9]+)?$" ||<p>Forbidden access to unknown vhost 10.168.50.20</p> req.http.host ~ "^(?i)swh\-rproxy3\.inria\.fr(:[0-9]+)?$"<h3>Guru Meditation:</h3> ) {<p>XID: 32789</p> return(synth(403, "Forbidden access"));<hr> }<p>Varnish cache server</p> </body> </html> ``` same goes for http://swh-rproxy3.inria.fr... with local /etc/hosts tampered with: ``` ... 10.168.50.10 bardo.internal.admin.swh.network 10.168.50.20 hedgedoc.softwareheritage.org swh-rproxy3.inria.fr toto }... ```