packetcat/ansible-playbooks
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

clean up of firewall rulesets

Browse Source 
remove byte counters, remove chains that didn't need to be there
This commit is contained in:
staticsafe 2019-08-21 23:41:40 -04:00
parent 8e471b7254
commit 3002276209
6 changed files with 21 additions and 202 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
ubuntu/roles/firewall-ruleset-deploy/files/catsith.asininetech.net.rules.v4
View File

@ -1,8 +1,8 @@
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
*filter
:INPUT DROP [1971:93740]
:FORWARD DROP [0:0]
:OUTPUT DROP [55632:4190069]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
-A INPUT -s 64.62.202.71/32 -j DROP
-A INPUT -s 173.244.135.0/24 -m comment --comment "infegy data collection" -j DROP
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
@ -22,34 +22,3 @@
-A OUTPUT -p tcp -m tcp --dport 5665 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
COMMIT
# Completed on Thu Aug 22 02:22:14 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
*mangle
:PREROUTING ACCEPT [1436823:274632683]
:INPUT ACCEPT [1436823:274632683]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [991155:4677392300]
:POSTROUTING ACCEPT [935523:4673202231]
COMMIT
# Completed on Thu Aug 22 02:22:14 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
*nat
:PREROUTING ACCEPT [5075:277850]
:INPUT ACCEPT [3428:197268]
:OUTPUT ACCEPT [79147:5741156]
:POSTROUTING ACCEPT [24500:1591632]
COMMIT
# Completed on Thu Aug 22 02:22:14 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
*raw
:PREROUTING ACCEPT [1436823:274632683]
:OUTPUT ACCEPT [991155:4677392300]
COMMIT
# Completed on Thu Aug 22 02:22:14 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
*security
:INPUT ACCEPT [1434852:274538943]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [935523:4673202231]
COMMIT
# Completed on Thu Aug 22 02:22:14 2019

39
ubuntu/roles/firewall-ruleset-deploy/files/catsith.asininetech.net.rules.v6
View File

@ -1,39 +1,8 @@
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
*nat
:PREROUTING ACCEPT [39130:3552329]
:INPUT ACCEPT [38219:3476328]
:OUTPUT ACCEPT [649972:61144068]
:POSTROUTING ACCEPT [166603:14761332]
COMMIT
# Completed on Thu Aug 22 02:22:34 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
*security
:INPUT ACCEPT [3063254:3242714018]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [2710431:1187736120]
COMMIT
# Completed on Thu Aug 22 02:22:34 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
*raw
:PREROUTING ACCEPT [3069715:3243124325]
:OUTPUT ACCEPT [3197462:1234338936]
COMMIT
# Completed on Thu Aug 22 02:22:34 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
*mangle
:PREROUTING ACCEPT [3069715:3243124325]
:INPUT ACCEPT [3069675:3243120621]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3197463:1234339228]
:POSTROUTING ACCEPT [2710434:1187736892]
COMMIT
# Completed on Thu Aug 22 02:22:34 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
*filter
:INPUT DROP [6421:406603]
:FORWARD DROP [0:0]
:OUTPUT DROP [487029:46602336]
:icmp_in - [0:0]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
:icmp_in -
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

35
ubuntu/roles/firewall-ruleset-deploy/files/deirdre.asininetech.net.rules.v4
View File

@ -1,38 +1,9 @@
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:25:12 2019
*security
:INPUT ACCEPT [1978634:401612450]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1760019:5887202636]
COMMIT
# Completed on Thu Aug 22 02:25:12 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:25:12 2019
*raw
:PREROUTING ACCEPT [1979278:401653128]
:OUTPUT ACCEPT [1816491:5891399408]
COMMIT
# Completed on Thu Aug 22 02:25:12 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:25:12 2019
*nat
:PREROUTING ACCEPT [8117:491527]
:INPUT ACCEPT [7525:453299]
:OUTPUT ACCEPT [88110:6323193]
:POSTROUTING ACCEPT [34162:2227657]
COMMIT
# Completed on Thu Aug 22 02:25:12 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:25:12 2019
*mangle
:PREROUTING ACCEPT [1979278:401653128]
:INPUT ACCEPT [1979278:401653128]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1816491:5891399408]
:POSTROUTING ACCEPT [1760019:5887202636]
COMMIT
# Completed on Thu Aug 22 02:25:12 2019
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:25:12 2019
*filter
:INPUT DROP [644:40678]
:FORWARD DROP [0:0]
:OUTPUT DROP [56472:4196772]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
-A INPUT -s 185.6.8.3/32 -m comment --comment "domaincrawler.com aggressive crawler/bot" -j DROP
-A INPUT -s 185.6.8.7/32 -m comment --comment "domaincrawler.com aggressive crawler/bot" -j DROP
-A INPUT -s 173.244.135.0/24 -m comment --comment "infegy data collection" -j DROP

38
ubuntu/roles/firewall-ruleset-deploy/files/deirdre.asininetech.net.rules.v6
View File

@ -1,39 +1,9 @@
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:25:57 2019
*nat
:PREROUTING ACCEPT [51379:4581191]
:INPUT ACCEPT [50755:4496846]
:OUTPUT ACCEPT [772065:72159452]
:POSTROUTING ACCEPT [245450:21607052]
COMMIT
# Completed on Thu Aug 22 02:25:57 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:25:57 2019
*security
:INPUT ACCEPT [5089056:5059987284]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [4713591:2067003702]
COMMIT
# Completed on Thu Aug 22 02:25:57 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:25:57 2019
*raw
:PREROUTING ACCEPT [5093764:5060319397]
:OUTPUT ACCEPT [5241795:2117654559]
COMMIT
# Completed on Thu Aug 22 02:25:57 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:25:57 2019
*mangle
:PREROUTING ACCEPT [5093767:5060319662]
:INPUT ACCEPT [5093720:5060315830]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [5241798:2117654824]
:POSTROUTING ACCEPT [4713594:2067003967]
COMMIT
# Completed on Thu Aug 22 02:25:57 2019
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:25:57 2019
*filter
:INPUT DROP [4661:328281]
:FORWARD DROP [0:0]
:OUTPUT DROP [528204:50650857]
:icmp_in - [0:0]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
:icmp_in -
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

36
ubuntu/roles/firewall-ruleset-deploy/files/waldo.asininetech.net.rules.v4
View File

@ -1,8 +1,8 @@
# Generated by iptables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
-A INPUT -s 173.244.135.0/24 -m comment --comment "infegy data collection" -j DROP
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
@ -22,33 +22,3 @@
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by iptables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*mangle
:PREROUTING ACCEPT [218487873:77836206409]
:INPUT ACCEPT [218472743:77835851657]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [198640222:231265817270]
:POSTROUTING ACCEPT [198514192:231251706844]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by iptables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*nat
:PREROUTING ACCEPT [395831:23115645]
:INPUT ACCEPT [342246:20080838]
:OUTPUT ACCEPT [2104459:144197031]
:POSTROUTING ACCEPT [2056326:133263204]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by iptables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*raw
:PREROUTING ACCEPT [218487873:77836206409]
:OUTPUT ACCEPT [198640222:231265817270]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by iptables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*security
:INPUT ACCEPT [218343605:77829541325]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [198514192:231251706844]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019

38
ubuntu/roles/firewall-ruleset-deploy/files/waldo.asininetech.net.rules.v6
View File

@ -1,9 +1,9 @@
# Generated by ip6tables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:icmp_in - [0:0]
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
:icmp_in -
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
@ -30,33 +30,3 @@
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by ip6tables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*mangle
:PREROUTING ACCEPT [70193758:23194099590]
:INPUT ACCEPT [70193724:23194096614]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [85031518:98010620009]
:POSTROUTING ACCEPT [85022058:98009850269]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by ip6tables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*raw
:PREROUTING ACCEPT [70193758:23194099590]
:OUTPUT ACCEPT [85031518:98010620009]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by ip6tables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*security
:INPUT ACCEPT [70184454:23193336835]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [85022058:98009850269]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019
# Generated by ip6tables-save v1.6.1 on Wed Jun 5 07:00:25 2019
*nat
:PREROUTING ACCEPT [93205:8443266]
:INPUT ACCEPT [92957:8404954]
:OUTPUT ACCEPT [340319:31645894]
:POSTROUTING ACCEPT [336994:31244254]
COMMIT
# Completed on Wed Jun 5 07:00:25 2019