Commit graph

9 commits

Author SHA1 Message Date
Jérémy Lecour 5476538eb1 minifirewall: no http filtering by default
All checks were successful
continuous-integration/drone/push Build is passing
2019-10-30 14:37:22 +01:00
Benoît S. 755eaab60a minifirewall: use systemctl is-enabled
Some checks reported errors
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is passing
Fixes #66
2019-07-04 17:41:59 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour c3e4a78442 minifirewall: main file is configurable 2018-12-04 14:45:48 +01:00
Jérémy Lecour 03c53433d6 Add minifirewal_status and check_minifirewall
minifirewall_status returns "started" on stdout and exit code 0,
or "stopped" on stdout and exit code 1. The state of minifirewall
is determined by looking for common iptables rules applied by
minifirewall.

check_minifirewall is an NRPE plugin for minifirewall. It returns:
* 0 (OK) if the firewall state is consistent with its configuration
(from the alert5 script)
* 1 (WARNING) if the firewall is started but alert5 is not configured
properly
* 2 (CRITICAL) if the firewall is not running but it should be.
2018-04-06 09:52:18 +02:00
Romain Dessort 0f12501760 Add security-cdn.debian.org to HTTPSITES whitelist
Debian migrated its security.debian.org repository to Fastly CDN
(security-cdn.debian.org) so we have to whitelist it too to make
security upgrades possible.
2018-01-29 11:15:11 -05:00
Ludovic Poujol b90260ae28 minifirewall: Make outgoing SSH in IPv6 works 2017-12-15 14:49:21 +01:00
Jérémy Lecour 0dfc66683a remove zidane.evolix.net from minifirewall 2017-11-27 10:19:04 +01:00
Jérémy Lecour c97110f865 minifirewall: embed files instead of git clone 2017-07-27 22:55:07 -04:00