Преглед изворни кода

re-enable proper ssh port in iptables after algo overwrites

tags/v1.2.1
Jonathan Cobb пре 4 година
родитељ
комит
ca95a31f7a
1 измењених фајлова са 12 додато и 1 уклоњено
  1. +12
    -1
      bubble-server/src/main/resources/ansible/roles/algo/tasks/algo_firewall.yml

+ 12
- 1
bubble-server/src/main/resources/ansible/roles/algo/tasks/algo_firewall.yml Прегледај датотеку

@@ -3,7 +3,7 @@
#
# Insert additional firewall rules to allow required services to function
# Insert them all on rule_num 5, and insert them in reverse order here:
- name: Allow SSH
- name: Allow SSH tarpit
iptables:
chain: INPUT
protocol: tcp
@@ -11,6 +11,17 @@
ctstate: NEW
syn: match
jump: ACCEPT
comment: Accept new SSH tarpit connections
become: yes

- name: Allow SSH
iptables:
chain: INPUT
protocol: tcp
destination_port: 1202
ctstate: NEW
syn: match
jump: ACCEPT
comment: Accept new SSH connections
become: yes



Loading…
Откажи
Сачувај