-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At the CI I made a netgroup that has the MCS and CI bastion hosts - namby/pamby.mcs.anl.gov and jarvis/jeeves.ci.uchicago.edu. I'm then referencing this in things liks /etc/hosts.allow and /etc/security/access.conf. That way when new bastions are added I only need to update things in one place. I think I'll also make a bcfg Probe to pull these down so I can use them to make shorewall rules and the like. Not sure if we want to do this type of thing on the MCS side as well. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iEYEARECAAYFAk3So+oACgkQ4RgdOxQVi0DEPQCfXoNHhxVGCjIfvZ5CE36q/4qH KW8AnRAaYGlCF8Yum3KeV7VP8b4rq0GS =FAiN -----END PGP SIGNATURE-----