| Commit message (Collapse) | Author | Age | Files | |
|---|---|---|---|---|
| * | Convert firewall to nftables. | Guilhem Moulin | 2020-01-23 | 1 |
| | | | | | Debian Buster uses the nftables framework by default. | |||
| * | Upgrade syntax to Ansible 2.7 (apt module). | Guilhem Moulin | 2018-12-03 | 1 |
| | | ||||
| * | Change group of executables in /usr/local/{bin,sbin} from root to staff. | Guilhem Moulin | 2017-05-14 | 1 |
| | | ||||
| * | wibble | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Be more specific regarding the protocol in use for IPSec policies. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | We use ESP only, so other protocols shouldn't be ACCEPTed. | |||
| * | Use a dedicated, non-routable, IPv4 for IPSec. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | | At the each IPSec end-point the traffic is DNAT'ed to / MASQUERADE'd from our dedicated IP after ESP decapsulation. Also, some IP tables ensure that alien (not coming from / going to the tunnel end-point) is dropped. | |||
| * | Don't save dynamic rules. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | These rules are automatically included by third-party servers such as strongSwan or fail2ban. | |||
| * | Add a 'check' switch to the firewall. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | update-firewall.sh -c does not update the firewall, but returns a non-zero value iff. running it without the switch would modify it. | |||
| * | Configure v4 and v6 iptable rulesets. | Guilhem Moulin | 2015-06-07 | 1 |
 |
index : fripost-ansible | |
| Fripost ansible scripts |
| summaryrefslogtreecommitdiffstats |