Commit Graph

221 Commits

Author SHA1 Message Date
d7a819df4b firewall: i've forgot to allow ESTABLISHED,… OUTPUT connections
firewall: increase LOG limit-burst to 10
2015-09-16 23:02:23 +02:00
c699ff9c4d firewall: set OUTPUT Policy to DROP and translate some comments. 2015-09-16 22:04:12 +02:00
5c5e0898d2 firewall: allow SNMP requests if cupsd service is available. 2015-09-16 18:46:28 +02:00
bfadca762d firewall: allow INPUT NFSD if nfsd service is available.
firewall: allow OUTPUT if nfs client is available.
firewall: exclude tun* interface for default rules.
2015-09-16 18:43:29 +02:00
5a8b0b54fc firewall: allow OUTPUT: DNS and MAIL.
allow OUTPUT: ssh if an ssh client is available.
2015-09-16 18:33:37 +02:00
a80107a596 firewall: allow OUTPUT: 8140 if a puppetmaster service file exists. 2015-09-16 18:28:29 +02:00
d3bf7d12e2 firewall: allow 8140 if puppet is available. 2015-09-16 18:22:28 +02:00
3a21bf0eae firewall: allow udp/123 if ntpd is available. 2015-09-16 18:20:53 +02:00
a9e353fe37 firewall: allow 80 and 443 INPUT/OUTPUT if apache2|nginx is available.
Issue #1
2015-09-16 18:12:42 +02:00
147538cfa5 firewall: Add INPUT rules if sshd is available 2015-09-16 17:59:42 +02:00
e1b4d59b4f firewall: Insert VPN rules at the beginning. 2015-09-16 17:56:59 +02:00
15c3382f2f firewall: allow OUTPUT http(s) and OpenPGP 2015-09-16 17:55:44 +02:00
9d6fb75b7f Firewall: add rules if a dhcpd is available. 2015-09-11 19:40:19 +02:00
f425671216 Add Iptables rules if dhclient is available. 2015-09-11 19:38:03 +02:00
acde46cc56 Add Iptables rules only if a slapd or an ldap directory is available. 2015-09-11 19:33:08 +02:00
8432e37c93 Iptables script. 2015-09-11 19:08:30 +02:00
18224ba566 bash_quote: correct shebang and check if lynx is available. 2015-09-08 02:14:15 +02:00
eaa960ae4e New path for the i3lock img. 2015-09-03 22:33:26 +02:00
9e424b1cff Correct process test for ceph-mon. 2015-09-01 16:03:15 +02:00
3ea5a7bc41 Correct 'ceph osd' cmd with default user. 2015-09-01 15:06:21 +02:00
0406b54e46 Remove some \n. 2015-09-01 14:41:17 +02:00
4ac345253b Move all Ceph tests to a file (05ceph). 2015-09-01 14:15:08 +02:00
736a22dfef Ceph-mon process monitor: ensure to run the ceph cmd even if a specific
user must be use.
2015-09-01 11:44:03 +02:00
f7337fd9d8 Use "command -v" instead of "which"
see http://pubs.opengroup.org/onlinepubs/9699919799/utilities/command.html#tag_20_22_18
Add "monitor" for ceph osd.
2015-08-29 10:15:02 +02:00
fede5d8b50 Add ceph osd monitoring. 2015-08-29 09:23:41 +02:00
07664430de Add Ceph monitoring. 2015-08-29 09:22:59 +02:00
2b7a9c6ab1 Tiny script to screen capture. 2015-05-11 23:41:56 +02:00
a8fefd4702 Add Ceph-mon monitoring. 2015-04-20 16:20:18 +02:00
018e89c35b Update link to download iso. 2015-04-20 16:19:59 +02:00
be0c54efd3 Add a wallpaper for the screenlocker :) 2015-03-26 10:48:50 +01:00
f4c62f2784 Correct variable incrementation ((LINE++)) only work with BASH. For SH:
LINE=$((LINE+1))
2015-03-26 10:00:58 +01:00
7a3403f5ef Correct the bash_quote because the syntax of
http://danstonchat.com/random.html just change.
2015-03-19 12:11:18 +01:00
ec70781402 Underscores in the motd scripts prevents them to run. 2015-02-07 00:02:22 +01:00
9a814f8d10 Move README to README.md 2015-02-06 23:28:54 +01:00
184e16a3eb Upadet the README file. 2015-02-06 23:28:31 +01:00
e036055309 Divide the big dynmotd scripts into tiny ones. 2015-02-06 23:06:37 +01:00
eac6b98bac Using grep+sort+head -n1 instead of grep -m1 permit, if a port is
listening on multiple interfaces (127.0.0.1:25, 192.168.0.1:25, *:25) to
print the most generic one (*:25).
2015-02-02 09:46:12 +01:00
566450407e Use ss instead of the deprecated netstat. 2015-02-02 09:44:39 +01:00
f0d3126c30 Add some tests to print process and socket informations. 2015-02-02 09:40:57 +01:00
5c495fff26 Add a "vim" pager (need a less.vim macro). 2015-01-30 12:00:39 +01:00
b049232a9d Dynmotd: rename the occur_num function into get_pattern_count
get_pattern_count: add a expected value and compare this one and the
number of occurrence to choose the color.
2015-01-28 17:47:55 +01:00
023c284f01 Dynmotd: Remove the awk command to get number of occurrence .. useless
with a regex for grep.
* A function return the number of occurrence with a color (green:=0;
* red:!=0).
2015-01-28 17:25:37 +01:00
2469487031 Dynmotd: add a find command to get the last auth.log file and print the
number of sudo and ssh auth failed.
2015-01-28 16:31:33 +01:00
f001d412de Dynmotd: some fix (tabs instead of white spaces, $(cmd) instead of
`cmd`, ... )
2015-01-28 16:29:24 +01:00
58ad3f3232 Rewrite a dynmotd script in full sh. 2015-01-28 11:28:46 +01:00
17d0b679f9 Add shell_color.sh a tiny script to show how to use color with a shell
(classic sh).
2015-01-28 10:12:01 +01:00
63bc985178 Correct variables name in flac_to_mp3 script: error if the variable
content had white spaces.
2014-12-09 14:04:26 +01:00
596fdf9f85 Add a new script to rename the commit username of a git repo. 2014-12-09 14:03:22 +01:00
cb520c65ef Snapsend:
* Send an email for the daily snapshot with the log in content
  * Add the hostname in the mail's subject (async and daily)
2014-11-20 14:30:29 +01:00
8d48656d2f Small script to take ZFS snapshot periodically and send it to a remote
host.
Will be replace by zfSnap soon (many pull request to add a send option),
maybe in v2.1.
2014-11-18 16:02:20 +01:00