Parcourir la source

re-enable proper ssh port in iptables after algo overwrites

tags/v1.2.1
Jonathan Cobb il y a 4 ans
Parent
révision
ca95a31f7a
1 fichiers modifiés avec 12 ajouts et 1 suppressions
  1. +12
    -1
      bubble-server/src/main/resources/ansible/roles/algo/tasks/algo_firewall.yml

+ 12
- 1
bubble-server/src/main/resources/ansible/roles/algo/tasks/algo_firewall.yml Voir le fichier

@@ -3,7 +3,7 @@
#
# Insert additional firewall rules to allow required services to function
# Insert them all on rule_num 5, and insert them in reverse order here:
- name: Allow SSH
- name: Allow SSH tarpit
iptables:
chain: INPUT
protocol: tcp
@@ -11,6 +11,17 @@
ctstate: NEW
syn: match
jump: ACCEPT
comment: Accept new SSH tarpit connections
become: yes

- name: Allow SSH
iptables:
chain: INPUT
protocol: tcp
destination_port: 1202
ctstate: NEW
syn: match
jump: ACCEPT
comment: Accept new SSH connections
become: yes



Chargement…
Annuler
Enregistrer