Skip to content

[RFC] Firewall role - #4

Merged
ericclemmons merged 6 commits into
masterfrom
firewall-role
Sep 30, 2014
Merged

ericclemmons merged 6 commits into
masterfrom
firewall-role

Conversation

@EvanK

@EvanK EvanK commented Sep 14, 2014

Copy link
Copy Markdown
Contributor

Implemented (optional) firewall role:

  • iptables as persistent firewall layer on all eth interfaces
    • optional ipv6 support
    • configured open ports for ssh, http, https
  • fail2ban as intrusion protection system
    • configured for ssh (+ddos), apache (+overflow)
    • configurable ip whitelist, ban time & notifications
  • added as service in evolution init script
  • test for ports expected open & expected blocked

Reimplements evolution/genesis-wordpress#71

Note: this does not affect my vagrant precise64, but does affect TravisCI's precise-based image 🤷

See https://forum.linode.com/viewtopic.php?t=9070&p=58732
@EvanK
EvanK force-pushed the firewall-role branch 9 times, most recently from abb04a7 to 3639d0b Compare September 15, 2014 18:42
Note: for remote (eg: vagrant) box, probe with netcat; for local (eg: travis) box, grep iptables listing
@EvanK EvanK changed the title [WIP] Firewall role [RFC] Firewall role Sep 15, 2014
@EvanK

EvanK commented Sep 15, 2014

Copy link
Copy Markdown
Contributor Author

Hey @ericclemmons, check it

@jameswlane

Copy link
Copy Markdown
Contributor

@EvanK I like it

@ericclemmons

Copy link
Copy Markdown
Contributor

Dude, we're gonna have to do some docs for Evolution 'cause this is too cool to not highlight as a feature.

I'll resolve the merge conflict myself, since it's because of the generator. Thanks!

@ericclemmons
ericclemmons merged commit 13c8baa into master Sep 30, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants