CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-09 10:42:54 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2932 from Security-Onion-Solutions/delta

Browse Source 
only save at the end
This commit is contained in:
Josh Patterson
2021-02-11 09:25:31 -05:00
committed by GitHub
parent 97594f84cb 3cfbc61f4e
commit bf8ca590d0
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/firewall/init.sls
View File

@@ -34,7 +34,6 @@ iptables_allow_established:
- jump: ACCEPT
- match: conntrack
- ctstate: 'RELATED,ESTABLISHED'
- save: True
# I like pings
iptables_allow_pings:
@@ -43,7 +42,6 @@ iptables_allow_pings:
- chain: INPUT
- jump: ACCEPT
- proto: icmp
- save: True
# Create the chain for logging
iptables_LOGGING_chain:
@@ -68,7 +66,6 @@ iptables_log_input_drops:
- table: filter
- chain: INPUT
- jump: LOGGING
- save: True
# Enable global DOCKER-USER block rule
enable_docker_user_fw_policy:
@@ -79,7 +76,6 @@ enable_docker_user_fw_policy:
- in-interface: '!docker0'
- out-interface: docker0
- position: 1
- save: True
enable_docker_user_established:
iptables.insert:
@@ -89,7 +85,6 @@ enable_docker_user_established:
- in-interface: '!docker0'
- out-interface: docker0
- position: 1
- save: True
- match: conntrack
- ctstate: 'RELATED,ESTABLISHED'
@@ -115,7 +110,6 @@ enable_docker_user_established:
{% if action == 'insert' %}
- position: 1
{% endif %}
- save: True
{% endfor %}
{% endfor %}