mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Firewall Module - Add Firewall rules specific to masters
This commit is contained in:
@@ -1 +1,2 @@
|
||||
#masterfw.sls
|
||||
masterfw:
|
||||
- 127.0.0.1
|
||||
|
||||
@@ -101,6 +101,21 @@ enable_docker_user_established:
|
||||
# Rules if you are a Master
|
||||
{% if grains['role'] == 'so-master' %}
|
||||
|
||||
{% for ip in pillar.get('masterfw') %}
|
||||
# Allow Redis
|
||||
enable_maternode_redis_6379_{{ip}}:
|
||||
iptables.insert:
|
||||
- table: filter
|
||||
- chain: DOCKER-USER
|
||||
- jump: ACCEPT
|
||||
- proto: tcp
|
||||
- source: {{ ip }}
|
||||
- dport: 6379
|
||||
- position: 1
|
||||
- save: True
|
||||
|
||||
{% endfor %}
|
||||
|
||||
# Make it so all the minions can talk to salt and update etc.
|
||||
{% for ip in pillar.get('minions') %}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user