From af4f7c0238a273122fdf0047265b30f849b751a3 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Mon, 27 May 2024 12:23:04 +0100 Subject: [PATCH] added ports for proxy --- ansible/vars/protected.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 1c4f407..8e7a080 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -53,7 +53,7 @@ remote_group_rules: - { direction: "egress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_member", remote_group: "domain_controller", comment: "FRS RPC"} - { direction: "egress", protocol: "tcp", port_min: 80, port_max: 80, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTP"} - { direction: "egress", protocol: "tcp", port_min: 443, port_max: 443, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTPS"} - - { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "domain_member", remote_group: "proxy", comment: "HTTP proxy"} + - { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "user_vms", remote_group: "proxy", comment: "HTTP proxy"} remote_ip_rules: @@ -69,8 +69,10 @@ remote_ip_rules: - { direction: "egress", protocol: "udp", port_min: 67, port_max: 67, group: "domain_member", remote_ip: "0.0.0.0/0", comment: "DHCP"} - { direction: "egress", protocol: "tcp", port_min: 1688, port_max: 1688, group: "domain_member", remote_ip: "172.16.26.19/32", comment: "Windows Activation"} # Proxy - - { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "proxy", remote_ip: "10.1.0.0/24", comment: "http"} - - { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "proxy", remote_ip: "10.1.0.0/24", comment: "https"} + - { direction: "ingress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "proxy", remote_group: "user_vms", comment: "HTTP proxy"} + - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.4.71/32", comment: "SSH rundeck 1"} + - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.172/32", comment: "SSH rundeck 2"} + - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.242/32", comment: "SSH rundeck 3"} # ONLY PROTECTED FOR PROXY SSH and http[s]