saltstack-formulas/firewalld-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(pillar.example,test/): add example and test for richrule ratelimit

Browse Source 
Document and test the accept rate limiting of the rich rule.

Signed-off-by: Arnaud Patard <apatard@hupstream.com>
This commit is contained in:
Arnaud Patard 2021-01-21 11:39:55 +01:00
parent a2f4f3b36e
commit f25852637a
14 changed files with 99 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pillar.example
View File

@ -126,6 +126,14 @@ firewalld:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
ports:
# {%- if grains['id'] == 'salt.example.com' %}
- comment: salt-master

7
test/integration/default/controls/zones_spec.rb
View File

@ -37,6 +37,13 @@ control 'zones/public.xml configuration' do
<source ipset="fail2ban-ssh" />
<reject type="icmp-port-unreachable" />
</rule>
<rule>
<service name="http" />
<log prefix="http fw limit 3/m" level="warning">
<limit value="3/m"/>
</log>
<accept> <limit value="3/m"/></accept>
</rule>
</zone>
ZONE_XML
end

7
test/integration/default/files/_mapdata/amazonlinux-2.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/arch-base-latest.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/centos-7.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/centos-8.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/debian-10.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/debian-9.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/fedora-31.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/fedora-32.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/opensuse-15.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/ubuntu-16.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/ubuntu-18.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https

7
test/integration/default/files/_mapdata/ubuntu-20.yaml
View File

@ -134,6 +134,13 @@ values:
name: fail2ban-ssh
reject:
type: icmp-port-unreachable
- accept:
limit: "3/m"
log:
level: warning
limit: "3/m"
prefix: "http fw limit 3/m"
service: http
services:
- http
- https