CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Firewall Fun

Browse Source
This commit is contained in:
Mike Reeves
2022-09-16 13:31:23 -04:00
parent bc1921bd0e
commit 70c95c7c7b
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
salt/firewall/soc_firewall.yaml
View File

@@ -3,19 +3,28 @@ firewall:
hosts: hosts:
analyst_workstations: analyst_workstations:
description: List of IP Addresses or CIDR blocks to allow analyst workstations. description: List of IP Addresses or CIDR blocks to allow analyst workstations.
global: True
analyst: analyst:
description: List of IP Addresses or CIDR blocks to allow analyst connections. description: List of IP Addresses or CIDR blocks to allow analyst connections.
global: True
standalone: standalone:
description: List of IP Addresses or CIDR blocks to allow standalone connections. description: List of IP Addresses or CIDR blocks to allow standalone connections.
global: True
eval: eval:
description: List of IP Addresses or CIDR blocks to allow eval connections. description: List of IP Addresses or CIDR blocks to allow eval connections.
global: True
idh: idh:
description: List of IP Addresses or CIDR blocks to allow idh connections. description: List of IP Addresses or CIDR blocks to allow idh connections.
global: True
manager: manager:
description: List of IP Addresses or CIDR blocks to allow manager connections. description: List of IP Addresses or CIDR blocks to allow manager connections.
global: True
heavynode: heavynode:
description: List of IP Addresses or CIDR blocks to allow heavynode connections. description: List of IP Addresses or CIDR blocks to allow heavynode connections.
global: True
searchnode: searchnode:
description: List of IP Addresses or CIDR blocks to allow searchnode connections. description: List of IP Addresses or CIDR blocks to allow searchnode connections.
global: True
receiver: receiver:
description: List of IP Addresses or CIDR blocks to allow receiver connections. description: List of IP Addresses or CIDR blocks to allow receiver connections.
global: True