257 Commits

Author	SHA1	Message	Date
m0duspwnens	57562ad5e3	add managersearch and standlone fw rules for searchnode	2023-07-31 13:34:08 -04:00
m0duspwnens	4c8373452d	change to iptables-nft-services	2023-07-28 11:35:34 -04:00
m0duspwnens	3a22ef8e86	change iptables package name for redhat fam	2023-07-28 08:40:32 -04:00
m0duspwnens	54080c42fe	enable, not enabled	2023-07-27 17:01:19 -04:00
m0duspwnens	3c16218c5a	map services,pkg,config for firewall state	2023-07-27 15:45:18 -04:00
m0duspwnens	bc182c1c43	only run firewalld states if os_family is RedHat	2023-07-27 09:24:41 -04:00
m0duspwnens	fe9b934af6	Merge remote-tracking branch 'origin/2.4/dev' into iptables	2023-07-26 16:32:03 -04:00
m0duspwnens	373298430b	only run iptables-restore if config file is valid	2023-07-26 16:31:22 -04:00
Josh Brower	f24a3a51ce	Heavy Node fixes	2023-07-25 18:28:41 -04:00
m0duspwnens	4c9d172721	sorange to range	2023-07-21 16:21:18 -04:00
Josh Brower	7805ca8beb	Add Failover Support	2023-07-10 10:38:14 -04:00
m0duspwnens	5de9e5baf4	allow sensor to logstash on receiver	2023-06-15 14:46:46 -04:00
m0duspwnens	469390696e	2.4 receiver changes	2023-06-15 11:04:16 -04:00
m0duspwnens	2db95fe1b4	fw rules for receiver to managers	2023-06-14 15:24:14 -04:00
m0duspwnens	934b0f45a1	allow receiver to connect to salt manager	2023-06-14 15:08:07 -04:00
Josh Brower	5536f5a8c2	Add Fleet node to other roles	2023-05-17 09:32:20 -04:00
Mike Reeves	fb298224fc	Update defaults.yaml	2023-05-16 08:17:50 -04:00
Mike Reeves	a4cd695cc8	Airgap Rules Fix	2023-05-11 16:00:07 -04:00
m0duspwnens	b0bd64bc10	define and assign elastic_agent_update port	2023-05-03 12:40:56 -04:00
m0duspwnens	767c922083	add idh to firewall annotation	2023-05-03 11:55:29 -04:00
m0duspwnens	8359f1983c	idh firewall	2023-05-03 10:53:13 -04:00
m0duspwnens	c597766390	assign firewall pillars to * in top	2023-05-03 10:17:45 -04:00
Josh Brower	544fa824ea	Initial cut for Artifact Registry	2023-05-02 14:17:59 -04:00
m0duspwnens	80b40503fb	no more plural roles, update so-firewall-minion	2023-05-01 17:28:16 -04:00
m0duspwnens	1f6463a9bb	rework so-firewall to work with pillar files	2023-05-01 16:49:06 -04:00
m0duspwnens	9a4ae2b832	start with customhostgroup0	2023-04-28 16:44:02 -04:00
m0duspwnens	725f5414ba	fw rework for ui, still need to add idh to map	2023-04-28 15:30:18 -04:00
Josh Brower	a7d282b412	Firewall fixup	2023-04-15 18:33:44 -04:00
Josh Brower	cda67b2894	Ded Fleet Node - checkpoint	2023-04-04 16:11:22 -04:00
Josh Brower	af392681e3	Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa	2023-04-03 07:27:04 -04:00
m0duspwnens	627b243cac	Merge remote-tracking branch 'origin/2.4/dev' into guifixes	2023-03-24 13:52:38 -04:00
m0duspwnens	462b2b23b9	rework idh for web ui	2023-03-24 13:52:21 -04:00
Mike Reeves	007e2baf41	Change Elastic Logic	2023-03-21 17:46:52 -04:00
m0duspwnens	e3f9b5297a	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode	2023-03-02 16:58:56 -05:00
m0duspwnens	e6167dc34a	heavynode changes	2023-03-02 15:09:59 -05:00
Josh Brower	96467f0bd8	Merge pull request #9865 from Security-Onion-Solutions/2.4/fleet-esoutput ... Move Output to ES	2023-02-28 15:20:46 -05:00
m0duspwnens	44ed48033c	move requirement	2023-02-27 13:04:23 -05:00
m0duspwnens	068d383442	change to service.running	2023-02-27 12:44:46 -05:00
m0duspwnens	b4015ac73e	add sensor to node_containers	2023-02-27 10:05:08 -05:00
Josh Brower	f7176f9989	Move Output to ES	2023-02-27 09:58:43 -05:00
m0duspwnens	d12ea041bf	capitalize	2023-02-24 16:20:16 -05:00
m0duspwnens	6b486d9604	move to default	2023-02-24 15:55:27 -05:00
m0duspwnens	d502d95dba	changes for soc firewall	2023-02-24 15:24:02 -05:00
m0duspwnens	29c68c1273	fix bracket, add output to template	2023-02-24 14:32:35 -05:00
m0duspwnens	3e2e68fbd0	custom hostgroups in soc	2023-02-24 14:24:47 -05:00
Mike Reeves	afccd3f820	comment out minion installs for now	2023-02-24 12:21:14 -05:00
Mike Reeves	a0eb505db0	Add fireall custom groups	2023-02-24 11:12:17 -05:00
Mike Reeves	99105c7563	Add fireall custom groups	2023-02-24 10:43:41 -05:00
Mike Reeves	1289500e03	unfix playbook fix	2023-02-24 09:55:49 -05:00
m0duspwnens	399e4de73c	stop and disable firewalld	2023-02-23 11:04:23 -05:00