mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 18:22:47 +01:00
Firewall Module - Fix some docker iptables issues
This commit is contained in:
@@ -6,6 +6,21 @@
|
|||||||
{%- elif grains['role'] == 'so-sensor' %}
|
{%- elif grains['role'] == 'so-sensor' %}
|
||||||
{%- set ip = salt['pillar.get']('sensor:mainip', '') %}
|
{%- set ip = salt['pillar.get']('sensor:mainip', '') %}
|
||||||
{%- endif %}
|
{%- endif %}
|
||||||
|
# Quick Fix for Docker being difficult
|
||||||
|
iptables_fix_docker:
|
||||||
|
iptables.chain_present:
|
||||||
|
- name: DOCKER-USER
|
||||||
|
- table: filter
|
||||||
|
|
||||||
|
# Add the Forward Rule since Docker ripped it out
|
||||||
|
iptables_fix_fwd:
|
||||||
|
iptables.insert:
|
||||||
|
- table: filter
|
||||||
|
- chain: FORWARD
|
||||||
|
- jump: ACCEPT
|
||||||
|
- position: 1
|
||||||
|
- target: DOCKER-USER
|
||||||
|
|
||||||
# Keep localhost in the game
|
# Keep localhost in the game
|
||||||
iptables_allow_localhost:
|
iptables_allow_localhost:
|
||||||
iptables.append:
|
iptables.append:
|
||||||
|
|||||||
Reference in New Issue
Block a user