-
Notifications
You must be signed in to change notification settings - Fork 95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unify unatteded check firewalls #1224
base: unify-unattended
Are you sure you want to change the base?
Unify unatteded check firewalls #1224
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The firewall presence is not a problem but if there is a defined rule blocking a port, it is. I would like to check for every firewall present, if it contains any rule. iptables -S
works for showing all rules, and firewall-cmd --list-all-zones
too. The output can be filtered although if exist a more specific option must be used. The firewall ufw
must be included.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Other minor changes
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please review the requested changes and attach different output examples for every firewall.
Simulation adding similar ports, to validate the use of grep with an exact match.
Simulation of an environment with all firewalls installed, and all Wazuh ports blocked.
|
If I use the 'if', I get it to go into each command. This was a necessity of my laboratory that led me to not be able to apply it. Since when implementing it it failed in my scenario. And now I notice it and understand why. I implement it on Monday.
After a try. Maybe I'm not seeing something. I doubt whether it is necessary? |
Description
Check if firewalld, ufw or iptables exists. If they exist, check if there is any rule that prevents another component from connecting to it.