fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
...
*	Major refactoring of the firewall.	Guilhem Moulin	2015-06-07	2
\| \| \| \| \| \| \| \| \| \|	Also, added some options: -f force: no confirmation asked -c check: check (dry-run) mode -v verbose: see the difference between old and new ruleset -4 IPv4 only -6 IPv6 only
*	Don't save dynamic rules.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	These rules are automatically included by third-party servers such as strongSwan or fail2ban.
*	Use a dedicated 'fail2ban' chain for fail2ban.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	So it doesn't mess with the high-priority rules regarding IPSec.
*	Add a 'check' switch to the firewall.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \|	update-firewall.sh -c does not update the firewall, but returns a non-zero value iff. running it without the switch would modify it.
*	Configure the (basic) logging policy.	Guilhem Moulin	2015-06-07	3
\|
*	Configure rkhunter.	Guilhem Moulin	2015-06-07	2
\|
*	Configure samhain.	Guilhem Moulin	2015-06-07	1
\|
*	Configure v4 and v6 iptable rulesets.	Guilhem Moulin	2015-06-07	2
\|
*	Configure APT.	Guilhem Moulin	2015-06-07	3