CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add firewall rules for Analyst workstation

Browse Source
This commit is contained in:
Mike Reeves
2022-03-31 10:49:38 -04:00
parent a049e458c6
commit 179aa5e29c
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
setup/so-functions
View File

@@ -2722,6 +2722,13 @@ set_initial_firewall_policy() {
# TODO: implement # TODO: implement
;; ;;
esac esac
# Add some firewall rules for analyst workstations that get added to the grid
if [[ $ is_analyst ]]; then
$sshcmd -i /root/.ssh/so.key soremote@"$MSRV" sudo $default_salt_dir/salt/common/tools/sbin/so-firewall includehost minion "$MAINIP"
$sshcmd -i /root/.ssh/so.key soremote@"$MSRV" sudo $default_salt_dir/salt/common/tools/sbin/so-firewall --apply includehost analyst "$MAINIP"
fi
} }
# Set up the management interface on the ISO # Set up the management interface on the ISO