From 76d7c6decaee198bdd79c9a95f0e23262b1d56e2 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Mon, 28 Apr 2025 12:05:53 +0100 Subject: [PATCH] add wsus port for protected --- ansible/vars/protected.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 513c9f3..532d455 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -60,10 +60,12 @@ remote_group_rules: - { direction: "egress", protocol: "tcp", port_min: 80, port_max: 80, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTP"} - { direction: "egress", protocol: "tcp", port_min: 443, port_max: 443, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTPS"} - { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "user_vms", remote_group: "proxy", comment: "HTTP proxy"} + - { direction: "egress", protocol: "tcp", port_min: 8530, port_max: 8531, group: "domain_member", remote_group: "wsus_server", comment: "WSUS Client"} - { direction: "ingress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "proxy", remote_group: "user_vms", comment: "HTTP proxy"} + remote_ip_rules: # User VMs - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"}