mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
no more plural roles, update so-firewall-minion
This commit is contained in:
m0duspwnens
@@ -49,34 +49,34 @@ fi
|
|||||||
case "$ROLE" in
|
case "$ROLE" in
|
||||||
|
|
||||||
'MANAGER')
|
'MANAGER')
|
||||||
so-firewall --role=manager --ip="$IP"
|
so-firewall includehost manager "$IP"
|
||||||
;;
|
;;
|
||||||
'EVAL' | 'MANAGERSEARCH' | 'STANDALONE' | 'IMPORT')
|
'MANAGERSEARCH')
|
||||||
so-firewall --role=manager --ip="$IP"
|
so-firewall includehost manager "$IP"
|
||||||
so-firewall --role=sensors --ip="$IP"
|
so-firewall includehost searchnode "$IP" --apply
|
||||||
so-firewall --apply=true --role=searchnodes --ip="$IP"
|
|
||||||
;;
|
;;
|
||||||
'FLEET' | 'SENSOR' | 'SEARCHNODE' | 'HEAVYNODE' | 'IDH' | 'RECEIVER')
|
'EVAL' | 'STANDALONE' | 'IMPORT')
|
||||||
case "$ROLE" in
|
so-firewall includehost manager "$IP"
|
||||||
'FLEET')
|
so-firewall includehost sensor "$IP"
|
||||||
so-firewall --apply=true --role=fleet --ip="$IP"
|
so-firewall includehost searchnode "$IP" --apply
|
||||||
;;
|
;;
|
||||||
'SENSOR')
|
'FLEET')
|
||||||
so-firewall --apply=true --role=sensors --ip="$IP"
|
so-firewall includehost fleet "$IP" --apply
|
||||||
;;
|
;;
|
||||||
'SEARCHNODE')
|
'SENSOR')
|
||||||
so-firewall --apply=true --role=searchnodes --ip="$IP"
|
so-firewall includehost sensor "$IP" --apply
|
||||||
;;
|
;;
|
||||||
'HEAVYNODE')
|
'SEARCHNODE')
|
||||||
so-firewall --role=sensors --ip="$IP"
|
so-firewall includehost searchnode "$IP" --apply
|
||||||
so-firewall --apply=true --role=heavynodes --ip="$IP"
|
;;
|
||||||
;;
|
'HEAVYNODE')
|
||||||
'IDH')
|
so-firewall includehost sensor "$IP"
|
||||||
so-firewall --apply=true --role=sensors --ip="$IP"
|
so-firewall includehost heavynode "$IP" --apply
|
||||||
;;
|
;;
|
||||||
'RECEIVER')
|
'IDH')
|
||||||
so-firewall --apply=true --role=receivers --ip="$IP"
|
so-firewall includehost sensor "$IP" --apply
|
||||||
;;
|
;;
|
||||||
esac
|
'RECEIVER')
|
||||||
|
so-firewall includehost receiver "$IP" --apply
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
|||||||
@@ -11,18 +11,18 @@ firewall:
|
|||||||
endgame: []
|
endgame: []
|
||||||
eval: []
|
eval: []
|
||||||
fleet: []
|
fleet: []
|
||||||
heavynodes: []
|
heavynode: []
|
||||||
idh: []
|
idh: []
|
||||||
import: []
|
import: []
|
||||||
localhost:
|
localhost:
|
||||||
- 127.0.0.1
|
- 127.0.0.1
|
||||||
manager: []
|
manager: []
|
||||||
managersearch: []
|
managersearch: []
|
||||||
receivers: []
|
receiver: []
|
||||||
searchnodes: []
|
searchnode: []
|
||||||
securityonion_desktops: []
|
securityonion_desktop: []
|
||||||
self: []
|
self: []
|
||||||
sensors: []
|
sensor: []
|
||||||
standalone: []
|
standalone: []
|
||||||
strelka_frontend: []
|
strelka_frontend: []
|
||||||
syslog: []
|
syslog: []
|
||||||
@@ -181,15 +181,15 @@ firewall:
|
|||||||
- influxdb
|
- influxdb
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- beats_5044
|
- beats_5044
|
||||||
- beats_5644
|
- beats_5644
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
@@ -273,7 +273,7 @@ firewall:
|
|||||||
chain:
|
chain:
|
||||||
DOCKER-USER:
|
DOCKER-USER:
|
||||||
hostgroups:
|
hostgroups:
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
@@ -315,13 +315,13 @@ firewall:
|
|||||||
standalone:
|
standalone:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
@@ -361,7 +361,7 @@ firewall:
|
|||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
- agrules
|
- agrules
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- beats_5044
|
- beats_5044
|
||||||
- beats_5644
|
- beats_5644
|
||||||
@@ -370,7 +370,7 @@ firewall:
|
|||||||
- yum
|
- yum
|
||||||
- docker_registry
|
- docker_registry
|
||||||
- influxdb
|
- influxdb
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
@@ -381,7 +381,7 @@ firewall:
|
|||||||
- influxdb
|
- influxdb
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
@@ -448,13 +448,13 @@ firewall:
|
|||||||
localhost:
|
localhost:
|
||||||
portgroups:
|
portgroups:
|
||||||
- all
|
- all
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
@@ -493,7 +493,7 @@ firewall:
|
|||||||
- docker_registry
|
- docker_registry
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- beats_5044
|
- beats_5044
|
||||||
- beats_5644
|
- beats_5644
|
||||||
@@ -502,7 +502,7 @@ firewall:
|
|||||||
- yum
|
- yum
|
||||||
- docker_registry
|
- docker_registry
|
||||||
- influxdb
|
- influxdb
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
@@ -512,7 +512,7 @@ firewall:
|
|||||||
- influxdb
|
- influxdb
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
@@ -578,13 +578,13 @@ firewall:
|
|||||||
localhost:
|
localhost:
|
||||||
portgroups:
|
portgroups:
|
||||||
- all
|
- all
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
@@ -647,7 +647,7 @@ firewall:
|
|||||||
- beats_5056
|
- beats_5056
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- docker_registry
|
- docker_registry
|
||||||
- influxdb
|
- influxdb
|
||||||
@@ -658,7 +658,7 @@ firewall:
|
|||||||
- beats_5056
|
- beats_5056
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
- elastic_agent_data
|
- elastic_agent_data
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- docker_registry
|
- docker_registry
|
||||||
- influxdb
|
- influxdb
|
||||||
@@ -667,7 +667,7 @@ firewall:
|
|||||||
- redis
|
- redis
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- docker_registry
|
- docker_registry
|
||||||
- influxdb
|
- influxdb
|
||||||
@@ -741,13 +741,13 @@ firewall:
|
|||||||
standalone:
|
standalone:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- salt_manager
|
- salt_manager
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
@@ -785,7 +785,7 @@ firewall:
|
|||||||
elasticsearch_rest:
|
elasticsearch_rest:
|
||||||
portgroups:
|
portgroups:
|
||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
self:
|
self:
|
||||||
@@ -989,11 +989,11 @@ firewall:
|
|||||||
- elasticsearch_rest
|
- elasticsearch_rest
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
- elastic_agent_control
|
- elastic_agent_control
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- beats_5044
|
- beats_5044
|
||||||
- beats_5644
|
- beats_5644
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- elasticsearch_node
|
- elasticsearch_node
|
||||||
@@ -1068,10 +1068,10 @@ firewall:
|
|||||||
chain:
|
chain:
|
||||||
DOCKER-USER:
|
DOCKER-USER:
|
||||||
hostgroups:
|
hostgroups:
|
||||||
sensors:
|
sensor:
|
||||||
portgroups:
|
portgroups:
|
||||||
- beats_5644
|
- beats_5644
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups:
|
portgroups:
|
||||||
- redis
|
- redis
|
||||||
- beats_5644
|
- beats_5644
|
||||||
|
|||||||
@@ -31,17 +31,17 @@ firewall:
|
|||||||
endgame: *hostgroupsettingsadv
|
endgame: *hostgroupsettingsadv
|
||||||
eval: *hostgroupsettings
|
eval: *hostgroupsettings
|
||||||
fleet: *hostgroupsettings
|
fleet: *hostgroupsettings
|
||||||
heavynodes: *hostgroupsettings
|
heavynode: *hostgroupsettings
|
||||||
idh: *hostgroupsettings
|
idh: *hostgroupsettings
|
||||||
import: *hostgroupsettings
|
import: *hostgroupsettings
|
||||||
localhost: *ROhostgroupsettingsadv
|
localhost: *ROhostgroupsettingsadv
|
||||||
manager: *hostgroupsettings
|
manager: *hostgroupsettings
|
||||||
managersearch: *hostgroupsettings
|
managersearch: *hostgroupsettings
|
||||||
receivers: *hostgroupsettings
|
receiver: *hostgroupsettings
|
||||||
searchnodes: *hostgroupsettings
|
searchnode: *hostgroupsettings
|
||||||
securityonion_desktops: *hostgroupsettings
|
securityonion_desktop: *hostgroupsettings
|
||||||
self: *ROhostgroupsettingsadv
|
self: *ROhostgroupsettingsadv
|
||||||
sensors: *hostgroupsettings
|
sensor: *hostgroupsettings
|
||||||
standalone: *hostgroupsettings
|
standalone: *hostgroupsettings
|
||||||
strelka_frontend: *hostgroupsettings
|
strelka_frontend: *hostgroupsettings
|
||||||
syslog: *hostgroupsettings
|
syslog: *hostgroupsettings
|
||||||
@@ -186,11 +186,11 @@ firewall:
|
|||||||
advanced: True
|
advanced: True
|
||||||
multiline: True
|
multiline: True
|
||||||
helpLink: firewall.html
|
helpLink: firewall.html
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -264,7 +264,7 @@ firewall:
|
|||||||
chain:
|
chain:
|
||||||
DOCKER-USER:
|
DOCKER-USER:
|
||||||
hostgroups:
|
hostgroups:
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
elastic_agent_endpoint:
|
elastic_agent_endpoint:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -298,11 +298,11 @@ firewall:
|
|||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
standalone:
|
standalone:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
@@ -331,11 +331,11 @@ firewall:
|
|||||||
hostgroups:
|
hostgroups:
|
||||||
manager:
|
manager:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -381,11 +381,11 @@ firewall:
|
|||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
localhost:
|
localhost:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
@@ -414,11 +414,11 @@ firewall:
|
|||||||
hostgroups:
|
hostgroups:
|
||||||
managersearch:
|
managersearch:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -464,11 +464,11 @@ firewall:
|
|||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
localhost:
|
localhost:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
@@ -501,11 +501,11 @@ firewall:
|
|||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
fleet:
|
fleet:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -557,11 +557,11 @@ firewall:
|
|||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
standalone:
|
standalone:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
heavynodes:
|
heavynode:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
customhostgroup0:
|
customhostgroup0:
|
||||||
portgroups: *portgroupshost
|
portgroups: *portgroupshost
|
||||||
@@ -594,7 +594,7 @@ firewall:
|
|||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
elasticsearch_rest:
|
elasticsearch_rest:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -773,9 +773,9 @@ firewall:
|
|||||||
hostgroups:
|
hostgroups:
|
||||||
manager:
|
manager:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
beats_endpoint:
|
beats_endpoint:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
@@ -840,9 +840,9 @@ firewall:
|
|||||||
chain:
|
chain:
|
||||||
DOCKER-USER:
|
DOCKER-USER:
|
||||||
hostgroups:
|
hostgroups:
|
||||||
sensors:
|
sensor:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
searchnodes:
|
searchnode:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
self:
|
self:
|
||||||
portgroups: *portgroupsdocker
|
portgroups: *portgroupsdocker
|
||||||
|
|||||||
Reference in New Issue
Block a user