foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Open munin from all hosts firewll

Browse source
This commit is contained in:
Timo Makinen 2021-03-19 06:32:08 +00:00
parent f96f3f6789
commit 63f19f7d27
15 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/pf/files/pf.conf.gw_fsol
View file

@ -30,8 +30,9 @@ pass quick inet6 proto icmp6
antispoof for lo0
antispoof for vio0
# admin connection (internal)
# admin connection and munin (internal)
pass in quick on $int_if proto tcp from $int_net to self port ssh keep state (no-sync)
pass in quick on $int_if proto tcp from $int_net to self port 4949 keep state (no-sync)
# internal network
block in quick from any to self

3
roles/pf/files/pf.conf.gw_home
View file

@ -45,6 +45,9 @@ pass in quick on $ext_if proto tcp from 37.35.86.64/29 to self port ssh
pass in quick on $ext_if proto tcp from 37.16.96.144/28 to self port ssh
pass in quick on $ext_if proto tcp from 81.175.155.142/32 to self port ssh
# munin from internal network
pass in quick on $int_if proto tcp from $int_net to self port 4949
# allow dns queries from internal net
pass in quick on $int_if proto { tcp, udp } from $int_net to self port domain