CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Respond with 403 status code to unauthorized sensor requests

Browse Source
This commit is contained in:
Jason Ertel
2020-08-13 15:00:44 -04:00
parent 078f87d6c7
commit 40b5b96e17
4 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/nginx/etc/nginx.conf.so-eval
View File

@@ -297,6 +297,9 @@ http {
} }
location /sensoroniagents/ { location /sensoroniagents/ {
if ($http_authorization = "") {
return 403;
}
proxy_pass http://{{ managerip }}:9822/; proxy_pass http://{{ managerip }}:9822/;
proxy_read_timeout 90; proxy_read_timeout 90;
proxy_connect_timeout 90; proxy_connect_timeout 90;

3
salt/nginx/etc/nginx.conf.so-manager
View File

@@ -297,6 +297,9 @@ http {
} }
location /sensoroniagents/ { location /sensoroniagents/ {
if ($http_authorization = "") {
return 403;
}
proxy_pass http://{{ managerip }}:9822/; proxy_pass http://{{ managerip }}:9822/;
proxy_read_timeout 90; proxy_read_timeout 90;
proxy_connect_timeout 90; proxy_connect_timeout 90;

3
salt/nginx/etc/nginx.conf.so-managersearch
View File

@@ -296,6 +296,9 @@ http {
} }
location /sensoroniagents/ { location /sensoroniagents/ {
if ($http_authorization = "") {
return 403;
}
proxy_pass http://{{ managerip }}:9822/; proxy_pass http://{{ managerip }}:9822/;
proxy_read_timeout 90; proxy_read_timeout 90;
proxy_connect_timeout 90; proxy_connect_timeout 90;

3
salt/nginx/etc/nginx.conf.so-standalone
View File

@@ -297,6 +297,9 @@ http {
} }
location /sensoroniagents/ { location /sensoroniagents/ {
if ($http_authorization = "") {
return 403;
}
proxy_pass http://{{ managerip }}:9822/; proxy_pass http://{{ managerip }}:9822/;
proxy_read_timeout 90; proxy_read_timeout 90;
proxy_connect_timeout 90; proxy_connect_timeout 90;