adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-26 12:47:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

add ports for DFSR

Browse Source
This commit is contained in:
abrown38 committed 2024-09-18 08:38:12 +01:00
1 parent 3ebcc3a515
commit a20e4a26b5
2 files changed
+7 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ansible/vars/protected.yml
+5 -1
View File
@@ -28,7 +28,8 @@ remote_group_rules:
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_controller", remote_group: "domain_member", comment: "FRS RPC"}
# File servers
- { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_group: "domain_member", comment: "SMB"} # could be restricted
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "file_server", remote_group: "file_server", comment: "RPC for DFS"}
- { direction: "ingress", protocol: "tcp", port_min: 135, port_max: 135, group: "file_server", remote_group: "file_server", comment: "RPC for DFS"}
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "file_server", remote_group: "file_server", comment: "RPC client ports"}
# WSUS servers
- { direction: "ingress", protocol: "tcp", port_min: 8530, port_max: 8531, group: "wsus_server", remote_group: "domain_member", comment: "WSUS"}
# Chocolatey servers
@@ -36,6 +37,9 @@ remote_group_rules:
- { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "chocolatey_server", remote_group: "domain_member", comment: "Chocolatey HTTPS"}
- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "chocolatey_server", remote_group: "proxy", comment: "HTTP from proxy"}
# File servers egress
- { direction: "egress", protocol: "tcp", port_min: 135, port_max: 135, group: "file_server", remote_group: "file_server", comment: "RPC"}
# Client egress
- { direction: "egress", protocol: "udp", port_min: 53, port_max: 53, group: "domain_member", remote_group: "domain_controller", comment: "DNS UDP"}
- { direction: "egress", protocol: "tcp", port_min: 53, port_max: 53, group: "domain_member", remote_group: "domain_controller", comment: "DNS TCP"}
ansible/vars/standard.yml
+2 -2
View File
@@ -26,10 +26,10 @@ remote_group_rules:
- { direction: "ingress", protocol: "tcp", port_min: 3268, port_max: 3269, group: "domain_controller", remote_group: "domain_member", comment: "Global catalog"}
- { direction: "ingress", protocol: "udp", port_min: 123, port_max: 123, group: "domain_controller", remote_group: "domain_member", comment: "W32Time"}
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_controller", remote_group: "domain_member", comment: "FRS RPC"}
#- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_controller", remote_group: "domain_controller", comment: "FRS RPC"} # redundant because of above rule
# File servers
- { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_group: "domain_member", comment: "SMB"} # could be restricted
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "file_server", remote_group: "file_server", comment: "RPC for DFS"}
- { direction: "ingress", protocol: "tcp", port_min: 135, port_max: 135, group: "file_server", remote_group: "file_server", comment: "RPC for DFS"}
- { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "file_server", remote_group: "file_server", comment: "RPC client ports"}
# WSUS servers
- { direction: "ingress", protocol: "tcp", port_min: 8530, port_max: 8531, group: "wsus_server", remote_group: "domain_member", comment: "WSUS"}
# Chocolatey servers