CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-02-06 23:33:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #59 from weslambert/master

Browse Source 
Various updates
This commit is contained in:
Mike Reeves
2018-12-13 20:35:43 -05:00
committed by GitHub
parent f00e59dea3 9ce41f81b9
commit f8b1bd0ffc
2 changed files with 10 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
salt/firewall/init.sls
View File

@@ -1,19 +1,11 @@
# Firewall Magic for the grid
{% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %}
{%- if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %}
{%- set ip = salt['pillar.get']('static:masterip', '') %}
{% elif grains['role'] == 'so-node'%}
{%- elif grains['role'] == 'so-node' %}
{%- set ip = salt['pillar.get']('node:mainip', '') %}
{% elif grains['role'] == 'so-sensor'%}
{%- set ip = salt['pillar.get']('node:mainip', '') %}
{% endif %}
{%- elif grains['role'] == 'so-sensor' %}
{%- set ip = salt['pillar.get']('sensor:mainip', '') %}
{%- endif %}
# Keep localhost in the game
iptables_allow_localhost:
iptables.append: