jfraeys/infra
Watch
1
0
Fork
You've already forked infra
 0
Code Issues 21 Pull requests 4 Projects Releases Packages Wiki Activity Actions

docs(incidents): Cloudflare-only 80/443 DROP dead on the old production node (#233) #234

Merged
jfraeys merged 1 commit from jfraeys/docs/incident-docker-user-return-order into main 2026-10-16 16:31:04 -04:00
Conversation 0 Commits 1 Files changed 1 +30
jfraeys commented 2026-10-16 15:49:27 -04:00
Owner
Copy link

New entry in docs/incidents.md: on the old production node RETURN is rule 82 and the 80/443 DROPs are 83-84 (0 packets), so the origin answers directly over IPv4 and IPv6; the cause is that the script appends DROPs and only adds RETURN if absent, so the order depends on whether Docker or the script created the chain first; git.jfraeys.com is DNS-only, which the working rule would break (the new OVH node enforces it). Records that the fix is deliberately not deployed yet. Docs only. Issue #233.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ

New entry in docs/incidents.md: on the old production node RETURN is rule 82 and the 80/443 DROPs are 83-84 (0 packets), so the origin answers directly over IPv4 and IPv6; the cause is that the script appends DROPs and only adds RETURN if absent, so the order depends on whether Docker or the script created the chain first; git.jfraeys.com is DNS-only, which the working rule would break (the new OVH node enforces it). Records that the fix is deliberately not deployed yet. Docs only. Issue #233. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ
docs(incidents): the 80/443 Cloudflare-only DROP was behind RETURN on the old production node
All checks were successful
Secret scan / scan (pull_request) Successful in 17s
Details
65e177cb3f
 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ge5tovcwdEUBtPwUktsZZZ
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!234
No description provided.