Commit Graph

3344 Commits

Author SHA1 Message Date
m0duspwnens
03c43da6f2 create iptables file if it doesnt exist - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 17:19:03 -04:00
m0duspwnens
f92ad7d671 handle undefined local values - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 16:34:37 -04:00
m0duspwnens
119ce2d93f remove from writing to firewall pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:37:18 -04:00
m0duspwnens
39734b6983 Merge branch 'issue/641' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into issue/641 2020-06-10 15:35:21 -04:00
m0duspwnens
7c5343ebe1 copy local firewall yaml files during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:35:15 -04:00
Jason Ertel
23be399a68 Ensure host doesn't exist in both include and exclude lists; add support for port management; add support for removing host from exclude list 2020-06-10 15:19:36 -04:00
m0duspwnens
fcb26bdaed change how ips are added during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 15:03:34 -04:00
m0duspwnens
4df8a973cf Merge branch 'issue/641' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into issue/641 2020-06-10 14:05:34 -04:00
m0duspwnens
f89baff3d7 adding ability to assign hostgroup to single minion - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-10 14:05:19 -04:00
Jason Ertel
c072905717 Initial firewall management script 2020-06-10 01:18:39 -04:00
m0duspwnens
15fd4de669 remove yamlized rules, update assigned hostgroups - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-09 13:44:10 -04:00
m0duspwnens
accb3d536d add chain to iptables state - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-09 13:30:24 -04:00
m0duspwnens
721f2682ac changes for firewall - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641 2020-06-09 09:40:38 -04:00
m0duspwnens
5f9f86caa5 merge with dev and fix conflicts 2020-06-04 09:59:12 -04:00
Mike Reeves
5a9030883a Rename Bro to Zeek in some whiptail menus 2020-06-03 16:44:52 -04:00
Mike Reeves
f3fabcd93c Enable git 2020-06-03 16:21:45 -04:00
Jason Ertel
970368c74e Avoid logs leaking to stdout/stderr during cron jobs 2020-06-03 09:42:44 -04:00
Jason Ertel
9f0e48e337 Send stderr to /dev/null as well, since it's already been decided this output is unsuited for the logfile based on the comment 2020-06-03 08:55:06 -04:00
Jason Ertel
e6fcf75181 Re-ordered wazuh setup to avoid agent-service failures due to missing client.keys file; Prepare for user profile settings screen support in reverse proxy 2020-06-02 17:31:51 -04:00
weslambert
014274930a Merge pull request #815 from Security-Onion-Solutions/fix/syslog_cleanup
Clean up some stuff
2020-06-02 15:32:32 -04:00
weslambert
c91bc0e681 Clean up some stuff 2020-06-02 15:31:48 -04:00
weslambert
98e0f0d7d8 Merge pull request #814 from Security-Onion-Solutions/feature/syslog
Feature/syslog
2020-06-02 13:39:23 -04:00
Wes Lambert
8cac30728b update Logstash config 2020-06-02 17:36:36 +00:00
Wes Lambert
91673a5d70 Update FB config 2020-06-02 17:33:42 +00:00
Jason Ertel
42683ddb67 always restart acng and registry containers when docker restarts 2020-06-02 09:12:25 -04:00
Jason Ertel
07c0075fc0 Upgrade containerd.io and docker-ce to match ISO rpms 2020-06-02 08:43:06 -04:00
Jason Ertel
9d5f4049b5 Avoid filtering NIC when it's an empty string 2020-06-02 05:52:03 -04:00
Mike Reeves
69f940fe8c Merge pull request #811 from Security-Onion-Solutions/feature/updatetool
Couple of QOL scripts
2020-06-01 20:49:42 -04:00
Mike Reeves
307cbe4b77 Couple of QOL scripts 2020-06-01 20:48:25 -04:00
Josh Patterson
cc6a323f45 Merge pull request #810 from Security-Onion-Solutions/issue/749
Issue/749
2020-06-01 12:20:28 -04:00
m0duspwnens
f5c8091fd6 remove unneeded INITIALSETUP var from addtotab 2020-06-01 12:17:52 -04:00
m0duspwnens
1737b46abb Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-06-01 12:15:00 -04:00
Doug Burks
80d1814f10 remove event.module:zeek to make queries more generic 2020-06-01 12:00:33 -04:00
Mike Reeves
b091fe07c9 Merge pull request #809 from Security-Onion-Solutions/feature/metasuri
Suricata 5 Meta Data
2020-06-01 11:05:38 -04:00
Mike Reeves
03f34404b1 Suricata 5 Meta Data 2020-06-01 11:03:43 -04:00
weslambert
551c663046 Merge pull request #808 from Security-Onion-Solutions/fix/tunnel_parents
Rename tunnel_parents
2020-06-01 09:52:55 -04:00
Wes Lambert
51f5d64ef6 Rename tunnel_parents 2020-06-01 13:51:32 +00:00
weslambert
fa8b88b090 Merge pull request #806 from Security-Onion-Solutions/feature/vxlan_tunnel_id
fix naming of uid field for tunnel
2020-06-01 08:54:12 -04:00
Wes Lambert
d7ce3d4719 fix naming of uid field for tunnel 2020-06-01 12:52:57 +00:00
Doug Burks
f559621f00 add x509 issuer and subject groupby queries 2020-06-01 07:48:50 -04:00
Doug Burks
46dc5f42e9 combine two http queries into one with multiple groupby 2020-06-01 07:30:08 -04:00
m0duspwnens
5ddfb7ccce fix merge conflicts 2020-05-29 17:31:07 -04:00
Josh Patterson
0eeafa292e Merge pull request #802 from Security-Onion-Solutions/quickfix/wazuh/whitelistmanager
change how whitelist script determines if wazuh is enabled
2020-05-29 17:26:10 -04:00
m0duspwnens
4dfb58a98c change how whitelist script determines if wazuh is enabled 2020-05-29 17:22:39 -04:00
Josh Patterson
5f4e480b4c Merge pull request #801 from Security-Onion-Solutions/quickfix/search/nginx
add nginx state to searchnode in salt/top
2020-05-29 17:02:49 -04:00
m0duspwnens
17879ad88c add nginx state to searchnode in salt/top 2020-05-29 17:01:43 -04:00
m0duspwnens
a84203be7c Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:38:10 -04:00
Josh Patterson
828f8a0df8 Merge pull request #800 from Security-Onion-Solutions/quickfix/node
fix minion_type for *NODE install_type
2020-05-29 16:37:04 -04:00
m0duspwnens
d7e904e1ab fix minion_type for *NODE install_type 2020-05-29 16:35:39 -04:00
m0duspwnens
9ae68b52ef Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 16:22:00 -04:00