mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
Firewall Module - Add Storage Node
This commit is contained in:
@@ -166,6 +166,21 @@ enable_forwardnode_beats_5044_{{ip}}:
|
|||||||
|
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
|
||||||
|
{% for ip in pillar.get('storage_nodes') %}
|
||||||
|
|
||||||
|
enable_storagenode_redis_6379_{{ip}}:
|
||||||
|
iptables.insert:
|
||||||
|
- table: filter
|
||||||
|
- chain: DOCKER-USER
|
||||||
|
- jump: ACCEPT
|
||||||
|
- proto: tcp
|
||||||
|
- source: {{ ip }}
|
||||||
|
- dport: 6379
|
||||||
|
- position: 1
|
||||||
|
- save: True
|
||||||
|
|
||||||
|
{% endfor %}
|
||||||
|
|
||||||
# Allow Beats Endpoints to send their beats traffic
|
# Allow Beats Endpoints to send their beats traffic
|
||||||
{% for ip in pillar.get('beats_endpoint') %}
|
{% for ip in pillar.get('beats_endpoint') %}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user