From 767c922083ab7fb938ef17be06b8c911adc832cf Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 3 May 2023 11:55:29 -0400
Subject: [PATCH] add idh to firewall annotation

---
 salt/firewall/soc_firewall.yaml | 59 +++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)

diff --git a/salt/firewall/soc_firewall.yaml b/salt/firewall/soc_firewall.yaml
index cbb4b9f15..02209af60 100644
--- a/salt/firewall/soc_firewall.yaml
+++ b/salt/firewall/soc_firewall.yaml
@@ -902,3 +902,62 @@ firewall:
               portgroups: *portgroupshost
             customhostgroup9: 
               portgroups: *portgroupshost
+
+    idh:
+      chain:
+        DOCKER-USER:
+          hostgroups:
+            customhostgroup0:
+              portgroups: *portgroupsdocker
+            customhostgroup1:
+              portgroups: *portgroupsdocker
+            customhostgroup2:
+              portgroups: *portgroupsdocker
+            customhostgroup3:
+              portgroups: *portgroupsdocker
+            customhostgroup4:
+              portgroups: *portgroupsdocker
+            customhostgroup5:
+              portgroups: *portgroupsdocker
+            customhostgroup6:
+              portgroups: *portgroupsdocker
+            customhostgroup7:
+              portgroups: *portgroupsdocker
+            customhostgroup8:
+              portgroups: *portgroupsdocker
+            customhostgroup9:
+              portgroups: *portgroupsdocker
+        INPUT:
+          hostgroups:
+            anywhere:
+              portgroups: *portgroupshost
+            dockernet:
+              portgroups: *portgroupshost
+            localhost:
+              portgroups: *portgroupshost
+            manager:
+              portgroups: *portgroupshost
+            managersearch:
+              portgroups: *portgroupshost
+            standalone:
+              portgroups: *portgroupshost
+            customhostgroup0:
+              portgroups: *portgroupshost
+            customhostgroup1:
+              portgroups: *portgroupshost
+            customhostgroup2:
+              portgroups: *portgroupshost
+            customhostgroup3:
+              portgroups: *portgroupshost
+            customhostgroup4:
+              portgroups: *portgroupshost
+            customhostgroup5:
+              portgroups: *portgroupshost
+            customhostgroup6:
+              portgroups: *portgroupshost
+            customhostgroup7:
+              portgroups: *portgroupshost
+            customhostgroup8:
+              portgroups: *portgroupshost
+            customhostgroup9:
+              portgroups: *portgroupshost