mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
idh setup changes
This commit is contained in:
@@ -24,14 +24,14 @@ include:
|
|||||||
{% else %}
|
{% else %}
|
||||||
{% set proto = 'tcp' %}
|
{% set proto = 'tcp' %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
block_mgt_ip_idh_services_{{ proto }}_{{ OPENCANARYCONFIG[service~'.port'] }} :
|
block_mgt_ip_idh_services_{{ proto }}_{{ OPENCANARYCONFIG[service~'_x_port'] }} :
|
||||||
iptables.insert:
|
iptables.insert:
|
||||||
- table: filter
|
- table: filter
|
||||||
- chain: INPUT
|
- chain: INPUT
|
||||||
- jump: DROP
|
- jump: DROP
|
||||||
- position: 1
|
- position: 1
|
||||||
- proto: {{ proto }}
|
- proto: {{ proto }}
|
||||||
- dport: {{ OPENCANARYCONFIG[service~'.port'] }}
|
- dport: {{ OPENCANARYCONFIG[service~'_x_port'] }}
|
||||||
- destination: {{ GLOBALS.node_ip }}
|
- destination: {{ GLOBALS.node_ip }}
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|||||||
@@ -1311,18 +1311,6 @@ import_registry_docker() {
|
|||||||
|
|
||||||
idh_pillar() {
|
idh_pillar() {
|
||||||
touch $adv_idh_pillar_file
|
touch $adv_idh_pillar_file
|
||||||
title "Create the IDH Pillar"
|
|
||||||
printf '%s\n'\
|
|
||||||
"idh:"\
|
|
||||||
" listen_on_mgnt_int: True"\
|
|
||||||
" services:"\
|
|
||||||
" - HTTP"\
|
|
||||||
" - FTP"\
|
|
||||||
" - MYSQL"\
|
|
||||||
" - MSSQL"\
|
|
||||||
" - VNC"\
|
|
||||||
" - SSH" > "$idh_pillar_file"
|
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
logstash_pillar() {
|
logstash_pillar() {
|
||||||
|
|||||||
@@ -475,7 +475,7 @@ if ! [[ -f $install_opt_file ]]; then
|
|||||||
collect_mngr_hostname
|
collect_mngr_hostname
|
||||||
add_mngr_ip_to_hosts
|
add_mngr_ip_to_hosts
|
||||||
check_manager_connection
|
check_manager_connection
|
||||||
collect_idh_services
|
#collect_idh_services (this may be added back sometime in the future)
|
||||||
collect_idh_preferences
|
collect_idh_preferences
|
||||||
set_minion_info
|
set_minion_info
|
||||||
whiptail_end_settings
|
whiptail_end_settings
|
||||||
|
|||||||
Reference in New Issue
Block a user