From c83decc0a01c74ab64c46110cc40107317f52809 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Tue, 10 Dec 2019 14:44:10 -0500 Subject: [PATCH] Helix - add firewall for mode helix --- salt/firewall/init.sls | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/salt/firewall/init.sls b/salt/firewall/init.sls index f238fbf59..8a6d41f0f 100644 --- a/salt/firewall/init.sls +++ b/salt/firewall/init.sls @@ -20,7 +20,7 @@ iptables_fix_fwd: - jump: ACCEPT - position: 1 - target: DOCKER-USER - + # Keep localhost in the game iptables_allow_localhost: iptables.append: @@ -131,7 +131,7 @@ enable_wazuh_manager_1514_udp_{{ip}}: - save: True # Rules if you are a Master -{% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %} +{% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' or grains['role'] == 'so-helix'%} #This should be more granular iptables_allow_master_docker: iptables.insert: @@ -264,7 +264,7 @@ enable_master_navigator_4200_{{ip}}: - dport: 4200 - position: 1 - save: True - + enable_master_cortex_9001_{{ip}}: iptables.insert: - table: filter @@ -274,7 +274,7 @@ enable_master_cortex_9001_{{ip}}: - source: {{ ip }} - dport: 9001 - position: 1 - - save: True + - save: True enable_master_cyberchef_9080_{{ip}}: iptables.insert: