Commit Graph

25 Commits

Author SHA1 Message Date
staticsafe 9852a4ea21 remove tinc ports in deirdre 2021-04-05 09:18:44 -04:00
staticsafe 4085481ed0 remove elasticsearch ports from deirdre firewall rules 2021-04-05 09:18:06 -04:00
staticsafe 9aec73785d add rules to allow outbound NTP to deirdre 2021-04-05 08:29:25 -04:00
staticsafe 8aa1d869ba clean up unnecessary comments in firewall rulesets 2020-04-14 22:41:05 -04:00
staticsafe 53d62d54f5 let's try this again with destroy 2020-04-14 22:15:06 -04:00
staticsafe 377a5bcebf temporarily comment out firewall rule 2020-04-14 22:12:03 -04:00
staticsafe 92f286bbd6 should be src for ipset based rule 2020-04-14 22:03:31 -04:00
staticsafe c267ec243f use ipset instead of a bunch of INPUTs 2020-04-14 22:02:50 -04:00
staticsafe 66eebc37d3 add moz.com crawler to firewall block list on web servers 2020-03-28 23:10:00 -04:00
staticsafe 907b86492b add a DROP rule in deirdre.asininetech.net.rules.v4 2020-02-25 23:31:22 -05:00
staticsafe e866d062a9 add AlkonavtNetwork subnet to drop list on deirdre.asininetech.net.rules.v4 2020-02-20 14:46:21 -05:00
staticsafe db59ab205e add rule to drop SearchAtlas crawler 2020-02-20 14:26:02 -05:00
staticsafe c6997dcd39 add drop for Seekport crawler IP to deirdre and waldo 2020-02-14 19:29:13 -05:00
staticsafe bc92c9d437 Port opening for Tinc 2020-01-18 20:49:05 -05:00
staticsafe a0e26301cf deirdre should be able to talk outbound 9200 for ES 2020-01-18 17:17:51 -05:00
staticsafe 9e1e20d33f Remove port 4949 from allowed ports
deirdre no longer using munin-node
2020-01-06 10:17:29 -05:00
staticsafe ab33cd0200 Add yet another Bytespider range to block list to firewall rules. 2019-10-17 12:20:28 -04:00
staticsafe 7c7ff101e5 Missed a Bytespider crawler range 2019-10-17 12:03:15 -04:00
staticsafe f5d7c6dc39 Block aggressive Bytespider crawler across web servers 2019-10-17 11:58:42 -04:00
staticsafe afa8aa556c Add firewall rules to drop kiwifarms subnets. 2019-10-11 00:00:45 -04:00
staticsafe 7152d8d5f2 should be multiports 2019-10-04 09:44:14 -04:00
staticsafe d16ec626e1 add OUTPUT rules to allow DHCP on restricted nodes 2019-10-04 09:42:26 -04:00
staticsafe e419d3aefb add drop rule for 159.149.133.66 to deirdre.asininetech.net.rules.v4 2019-09-16 12:05:46 -04:00
staticsafe 3002276209 clean up of firewall rulesets
remove byte counters, remove chains that didn't need to be there
2019-08-21 23:42:07 -04:00
staticsafe d411bc74dd add firewall rulesets for deirdre.asininetech.net. 2019-08-21 22:26:34 -04:00