From dfb7640b22dba23114d7a3af77fe1fd68f7716fd Mon Sep 17 00:00:00 2001 From: abrown38 Date: Thu, 5 Dec 2024 10:19:10 +0000 Subject: [PATCH] Allow ICMP for host check (CMK) --- ansible/vars/protected.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 63bf494..3ca4fa8 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -86,5 +86,6 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_ip: "10.24.3.172/32", comment: "SSH rundeck 2"} - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_ip: "10.24.3.242/32", comment: "SSH rundeck 3"} - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "proxy", remote_ip: "10.24.2.152/32", comment: "Allow CheckMK"} + - { direction: "ingress", protocol: "icmp", port_min: -1, port_max: -1, group: "proxy", remote_ip: "10.24.2.152/32", comment: "Allow CheckMK ICMP"} - { direction: "ingress", protocol: "icmp", port_min: -1, port_max: -1, group: "domain_member", remote_ip: "10.24.2.152/32", comment: "Allow CheckMK ICMP"}