adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-26 12:27:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

added ports for proxy

Browse Source
This commit is contained in:
abrown38 committed 2024-05-27 12:23:04 +01:00
1 parent 7368049c03
commit af4f7c0238
1 file changed
+5 -3
Download Patch File Download Diff File Expand all files Collapse all files
ansible/vars/protected.yml
+5 -3
View File
@@ -53,7 +53,7 @@ remote_group_rules:
- { direction: "egress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_member", remote_group: "domain_controller", comment: "FRS RPC"}
- { direction: "egress", protocol: "tcp", port_min: 80, port_max: 80, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTP"}
- { direction: "egress", protocol: "tcp", port_min: 443, port_max: 443, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTPS"}
- { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "domain_member", remote_group: "proxy", comment: "HTTP proxy"}
- { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "user_vms", remote_group: "proxy", comment: "HTTP proxy"}
remote_ip_rules:
@@ -69,8 +69,10 @@ remote_ip_rules:
- { direction: "egress", protocol: "udp", port_min: 67, port_max: 67, group: "domain_member", remote_ip: "0.0.0.0/0", comment: "DHCP"}
- { direction: "egress", protocol: "tcp", port_min: 1688, port_max: 1688, group: "domain_member", remote_ip: "172.16.26.19/32", comment: "Windows Activation"}
# Proxy
- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "proxy", remote_ip: "10.1.0.0/24", comment: "http"}
- { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "proxy", remote_ip: "10.1.0.0/24", comment: "https"}
- { direction: "ingress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "proxy", remote_group: "user_vms", comment: "HTTP proxy"}
- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.4.71/32", comment: "SSH rundeck 1"}
- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.172/32", comment: "SSH rundeck 2"}
- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.242/32", comment: "SSH rundeck 3"}
# ONLY PROTECTED FOR PROXY SSH and http[s]