Commit Graph

621 Commits

Author SHA1 Message Date
gardouille d7a819df4b firewall: i've forgot to allow ESTABLISHED,… OUTPUT connections
firewall: increase LOG limit-burst to 10
2015-09-16 23:02:23 +02:00
gardouille c699ff9c4d firewall: set OUTPUT Policy to DROP and translate some comments. 2015-09-16 22:04:12 +02:00
gardouille 5c5e0898d2 firewall: allow SNMP requests if cupsd service is available. 2015-09-16 18:46:28 +02:00
gardouille bfadca762d firewall: allow INPUT NFSD if nfsd service is available.
firewall: allow OUTPUT if nfs client is available.
firewall: exclude tun* interface for default rules.
2015-09-16 18:43:29 +02:00
gardouille 5a8b0b54fc firewall: allow OUTPUT: DNS and MAIL.
allow OUTPUT: ssh if an ssh client is available.
2015-09-16 18:33:37 +02:00
gardouille a80107a596 firewall: allow OUTPUT: 8140 if a puppetmaster service file exists. 2015-09-16 18:28:29 +02:00
gardouille d3bf7d12e2 firewall: allow 8140 if puppet is available. 2015-09-16 18:22:28 +02:00
gardouille 3a21bf0eae firewall: allow udp/123 if ntpd is available. 2015-09-16 18:20:53 +02:00
gardouille a9e353fe37 firewall: allow 80 and 443 INPUT/OUTPUT if apache2|nginx is available.
Issue #1
2015-09-16 18:12:42 +02:00
gardouille 147538cfa5 firewall: Add INPUT rules if sshd is available 2015-09-16 17:59:42 +02:00
gardouille e1b4d59b4f firewall: Insert VPN rules at the beginning. 2015-09-16 17:56:59 +02:00
gardouille 15c3382f2f firewall: allow OUTPUT http(s) and OpenPGP 2015-09-16 17:55:44 +02:00
gardouille 9d6fb75b7f Firewall: add rules if a dhcpd is available. 2015-09-11 19:40:19 +02:00
gardouille f425671216 Add Iptables rules if dhclient is available. 2015-09-11 19:38:03 +02:00
gardouille acde46cc56 Add Iptables rules only if a slapd or an ldap directory is available. 2015-09-11 19:33:08 +02:00
gardouille 8432e37c93 Iptables script. 2015-09-11 19:08:30 +02:00
gardouille 18224ba566 bash_quote: correct shebang and check if lynx is available. 2015-09-08 02:14:15 +02:00
gardouille eaa960ae4e New path for the i3lock img. 2015-09-03 22:33:26 +02:00
gardouille 9e424b1cff Correct process test for ceph-mon. 2015-09-01 16:03:15 +02:00
gardouille 3ea5a7bc41 Correct 'ceph osd' cmd with default user. 2015-09-01 15:06:21 +02:00
gardouille 0406b54e46 Remove some \n. 2015-09-01 14:41:17 +02:00
gardouille 4ac345253b Move all Ceph tests to a file (05ceph). 2015-09-01 14:15:08 +02:00
gardouille 736a22dfef Ceph-mon process monitor: ensure to run the ceph cmd even if a specific
user must be use.
2015-09-01 11:44:03 +02:00
gardouille f7337fd9d8 Use "command -v" instead of "which"
see http://pubs.opengroup.org/onlinepubs/9699919799/utilities/command.html#tag_20_22_18
Add "monitor" for ceph osd.
2015-08-29 10:15:02 +02:00
gardouille fede5d8b50 Add ceph osd monitoring. 2015-08-29 09:23:41 +02:00
gardouille 07664430de Add Ceph monitoring. 2015-08-29 09:22:59 +02:00
gardouille 2b7a9c6ab1 Tiny script to screen capture. 2015-05-11 23:41:56 +02:00
gardouille a8fefd4702 Add Ceph-mon monitoring. 2015-04-20 16:20:18 +02:00
gardouille 018e89c35b Update link to download iso. 2015-04-20 16:19:59 +02:00
gardouille be0c54efd3 Add a wallpaper for the screenlocker :) 2015-03-26 10:48:50 +01:00
gardouille f4c62f2784 Correct variable incrementation ((LINE++)) only work with BASH. For SH:
LINE=$((LINE+1))
2015-03-26 10:00:58 +01:00
gardouille 7a3403f5ef Correct the bash_quote because the syntax of
http://danstonchat.com/random.html just change.
2015-03-19 12:11:18 +01:00
gardouille ec70781402 Underscores in the motd scripts prevents them to run. 2015-02-07 00:02:22 +01:00
gardouille 9a814f8d10 Move README to README.md 2015-02-06 23:28:54 +01:00
gardouille 184e16a3eb Upadet the README file. 2015-02-06 23:28:31 +01:00
gardouille e036055309 Divide the big dynmotd scripts into tiny ones. 2015-02-06 23:06:37 +01:00
gardouille eac6b98bac Using `grep+sort+head -n1` instead of `grep -m1` permit, if a port is
listening on multiple interfaces (127.0.0.1:25, 192.168.0.1:25, *:25) to
print the most generic one (*:25).
2015-02-02 09:46:12 +01:00
gardouille 566450407e Use `ss` instead of the deprecated `netstat`. 2015-02-02 09:44:39 +01:00
gardouille f0d3126c30 Add some tests to print process and socket informations. 2015-02-02 09:40:57 +01:00
gardouille 5c495fff26 Add a "vim" pager (need a less.vim macro). 2015-01-30 12:00:39 +01:00
gardouille b049232a9d Dynmotd: rename the occur_num function into get_pattern_count
get_pattern_count: add a expected value and compare this one and the
number of occurrence to choose the color.
2015-01-28 17:47:55 +01:00
gardouille 023c284f01 Dynmotd: Remove the awk command to get number of occurrence .. useless
with a regex for grep.
* A function return the number of occurrence with a color (green:=0;
* red:!=0).
2015-01-28 17:25:37 +01:00
gardouille 2469487031 Dynmotd: add a find command to get the last auth.log file and print the
number of sudo and ssh auth failed.
2015-01-28 16:31:33 +01:00
gardouille f001d412de Dynmotd: some fix (tabs instead of white spaces, $(cmd) instead of
`cmd`, ... )
2015-01-28 16:29:24 +01:00
gardouille 58ad3f3232 Rewrite a dynmotd script in full sh. 2015-01-28 11:28:46 +01:00
gardouille 17d0b679f9 Add shell_color.sh a tiny script to show how to use color with a shell
(classic sh).
2015-01-28 10:12:01 +01:00
gardouille 63bc985178 Correct variables name in flac_to_mp3 script: error if the variable
content had white spaces.
2014-12-09 14:04:26 +01:00
gardouille 596fdf9f85 Add a new script to rename the commit username of a git repo. 2014-12-09 14:03:22 +01:00
gardouille cb520c65ef Snapsend:
* Send an email for the daily snapshot with the log in content
  * Add the hostname in the mail's subject (async and daily)
2014-11-20 14:30:29 +01:00
gardouille 8d48656d2f Small script to take ZFS snapshot periodically and send it to a remote
host.
Will be replace by zfSnap soon (many pull request to add a send option),
maybe in v2.1.
2014-11-18 16:02:20 +01:00