Skip to content

Added variables and comments to ufw rules #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ihorzenich wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Added variables and comments to ufw rules #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions install_pro.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1177,20 +1177,20 @@ EOF

function basic_security() {
echo -e "${ARROW} ${YELLOW}Configuring firewall and enabling fail2ban...${NC}"
sudo ufw allow 16124/tcp > /dev/null 2>&1
sudo ufw allow "$SSHPORT"/tcp > /dev/null 2>&1
sudo ufw allow "$PORT"/tcp > /dev/null 2>&1
sudo ufw allow $RPCPORT/tcp comment "FLUX RPCPORT" > /dev/null 2>&1
sudo ufw allow $SSHPORT/tcp > /dev/null 2>&1
sudo ufw allow $PORT/tcp comment "FLUX" > /dev/null 2>&1
sudo ufw logging on > /dev/null 2>&1
sudo ufw default deny incoming > /dev/null 2>&1

sudo ufw allow out from any to any port 123 > /dev/null 2>&1
sudo ufw allow out to any port 80 > /dev/null 2>&1
sudo ufw allow out to any port 443 > /dev/null 2>&1
sudo ufw allow out to any port 53 > /dev/null 2>&1
sudo ufw allow out to any port 16124 > /dev/null 2>&1
sudo ufw allow out to any port 16125 > /dev/null 2>&1
sudo ufw allow out to any port 16127 > /dev/null 2>&1
sudo ufw allow from any to any port 16127 > /dev/null 2>&1
sudo ufw allow out to any port $RPCPORT comment "FLUX RPCPORT" > /dev/null 2>&1
sudo ufw allow out to any port $PORT comment "FLUX" > /dev/null 2>&1
sudo ufw allow out to any port $LOCPORT comment "FLUX LOCPORT" > /dev/null 2>&1
sudo ufw allow from any to any port $LOCPORT comment "FLUX LOCPORT" > /dev/null 2>&1

sudo ufw default deny outgoing > /dev/null 2>&1
sudo ufw limit OpenSSH > /dev/null 2>&1
Expand Down Expand Up @@ -1308,10 +1308,10 @@ EOF
function install_process() {

echo -e "${ARROW} ${YELLOW}Configuring firewall...${NC}"
sudo ufw allow $ZELFRONTPORT/tcp > /dev/null 2>&1
sudo ufw allow $LOCPORT/tcp > /dev/null 2>&1
sudo ufw allow $ZELNODEPORT/tcp > /dev/null 2>&1
sudo ufw allow $MDBPORT/tcp > /dev/null 2>&1
sudo ufw allow $ZELFRONTPORT/tcp comment "FLUX FRONTPORT" > /dev/null 2>&1
sudo ufw allow $LOCPORT/tcp comment "FLUX LOCPORT" > /dev/null 2>&1
sudo ufw allow $ZELNODEPORT/tcp comment "FLUX NODEPORT" > /dev/null 2>&1
sudo ufw allow $MDBPORT/tcp comment "FLUX MDBPORT" > /dev/null 2>&1

echo -e "${ARROW} ${YELLOW}Configuring service repositories...${NC}"

Expand Down