 Maximilian Ronniger
|
ed487f89ef
allow OpenVPN 8443:1194 tcp
|
hai 1 ano |
 Maximilian Ronniger
|
5f2f95c06b
kvmhost02: allow sieve-ssl access from web01
|
%!s(int64=2) %!d(string=hai) anos |
|
Maximilian Ronniger
|
6bfb52303e
kvmhost02: allow web01 access to conman
|
%!s(int64=2) %!d(string=hai) anos |
|
Maximilian Ronniger
|
2689e60b13
kvmhost02: deny bad web spiders
|
%!s(int64=2) %!d(string=hai) anos |
|
Maximilian Ronniger
|
461173bf69
kvmhost02: allow prx01 access to rpi4 http
|
%!s(int64=2) %!d(string=hai) anos |
|
Maximilian Ronniger
|
3570c7fa22
kvmhost02: use iptables restore
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Ronniger
|
096e2a7df4
kvmhost02: allow web01 ldap access to auth01
|
%!s(int64=3) %!d(string=hai) anos |
|
Maximilian Ronniger
|
4990b8557a
horstbox01: allow access to mail01
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
6f730cdba3
horstbox01: fix NAT to prx01
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
5e0de4a5ca
hosrstbox: allow admin01 access to http,myslq,pssql,ldap
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
aaef705b8e
allow mgmt vpn to access all vm ports
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
38c9997321
fix firewall
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
4dcac21146
anand: improve firewall
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
4dcde747ec
anand: add monitoring
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
cb97f44f96
Merge branch 'master' of https://repo.itguru.at/itguru/firewall
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
eae4c7b508
add initial fw for horstbox01
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
23fe97d6f2
kvmhost02: fix iptables path
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
53963bb695
kvmhost02: disable tso when installing firewall
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
6273c09061
kvmhost02: add nat for sieve
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
e4d7597aea
kvmhost02: allow sieve access from the internet
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
04a3ccbc78
kvmhost02: update emailserver filter
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
d17eb144d2
kvmhost02: update emailserver filter
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
c074a240b4
kvmhost02: allow and nat rtmp to prx01
|
%!s(int64=4) %!d(string=hai) anos |
|
Maximilian Ronniger
|
f0d83135b1
kvmhost02: do not use fail2ban with iptables
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
75b35dcfa4
prx01: update jitsi-meet https port
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
e4522d46f2
prx01+kvmhost02: allow jitsi-meet ports
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
c1efc2336d
kvmhost02: allow sieve access form web01 on mail01
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
63ad9f94a7
kvmhost02: deny tcp 10000 for webmin, prx access only
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
100f719087
kvmhost02: add fix_ipv6 script
|
%!s(int64=5) %!d(string=hai) anos |
|
Maximilian Ronniger
|
f2432a66c4
kvmhost02: allow 10000 for webmin
|
%!s(int64=5) %!d(string=hai) anos |
