Replace so-firewall

salt/common/tools/sbin/so-allow

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/usr/bin/bash
 
 # Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
 # or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 

salt/common/tools/sbin/so-firewall

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/usr/bin/bash
 
 # Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
 # or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 
@@ -71,6 +71,14 @@ else
 	exit 1
 fi
 
+# Are we dealing with an IP?
+if valid_ip4 "$IP"; then
+	echo "$IP is valid"
+else
+	echo "$IP is not a valid IP Address"
+	exit 1
+fi
+
 local_salt_dir=/opt/so/saltstack/local/salt/firewall
 
 # Let's see if the file exists and if it does, let's see if the IP exists.

salt/nginx/config/ssl.key

@@ -1 +1 @@
-# Replace this text with the text from the .crt
+# Replace this text with the text from the .key

setup/so-variables

@@ -80,6 +80,9 @@ whiptail_title="Security Onion Setup - $SOVERSION"
 export whiptail_title
 
 mkdir -p $local_salt_dir/pillar/minions
+mkdir -p $local_salt_dir/salt/firewall/hostgroups
+mkdir -p $local_salt_dir/salt/firewall/portgroups
+mkdir -p $local_salt_dir/salt/firewall/ports
 
 for THEDIR in bpf pcap elasticsearch ntp firewall redis backup strelka sensoroni curator soc soctopus docker zeek suricata nginx filebeat logstash soc manager kratos idstools idh elastalert 
 do