jcarr
/
wit-network-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

adding direct ssh access on default for bastion, and migrating to admin domain instead of 3 different zones

This commit is contained in:
toby 2018-10-01 10:38:25 +02:00
parent b18d2c03c8
commit 1c50cecdb5
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian/wit-network-config.postinst vendored
View File

@ -24,8 +24,8 @@ case "$1" in
### START gather all the info from the box and generate the variabels
export LOOPBACKv4=$(dig a +short ${HOSTNAME})
export LOOPBACKv6=$(dig aaaa +short ${HOSTNAME})
export LOOPBACKv4=$(dig a +short loopback.${HOSTNAME})
export LOOPBACKv6=$(dig aaaa +short loopback.${HOSTNAME})
NODEASN=$(dig txt +short asn.${HOSTNAME})
NODEASN="${NODEASN%\"}"
NODEASN="${NODEASN#\"}"

4
debian/wit-network-config.preinst vendored
View File

@ -16,8 +16,8 @@ set -e
case "$1" in
install|upgrade)
export LOOPBACKv4=$(dig a +short ${HOSTNAME})
export LOOPBACKv6=$(dig aaaa +short ${HOSTNAME})
export LOOPBACKv4=$(dig a +short loopback.${HOSTNAME})
export LOOPBACKv6=$(dig aaaa +short loopback.${HOSTNAME})
NODEASN=$(dig txt +short asn.${HOSTNAME})
NODEASN="${NODEASN%\"}"
NODEASN="${NODEASN#\"}"

1
files/firewall
View File

@ -21,6 +21,7 @@ case $1 in
iptables -A INPUT -p esp -j ACCEPT # ipsec
iptables -A INPUT -p udp --dport 500 --sport 500 -j ACCEPT # ipsec
iptables -A INPUT -p udp --dport 4500 --sport 4500 -j ACCEPT # ipsec
iptables -A INPUT -s 170.199.217.0 -p tcp --dport 22 -j ACCEPT # ssh from bastion
iptables -A INPUT -s 170.199.217.0 -p udp --sport 53 -j ACCEPT # dns
iptables -A INPUT -s 170.199.210.99 -p tcp --sport 443 -j ACCEPT # mirrors.wit.com
iptables -A INPUT -p icmp -j ACCEPT