suricata first
This commit is contained in:
+1
-1
@@ -102,10 +102,10 @@ source ./scripts/subinstallers/platform.sh
|
|||||||
echo "Setting up firewall (iptables)"
|
echo "Setting up firewall (iptables)"
|
||||||
if [ ! -f "/etc/iptables/rules.v4" ]; then
|
if [ ! -f "/etc/iptables/rules.v4" ]; then
|
||||||
echo "Setting iptables rules..."
|
echo "Setting iptables rules..."
|
||||||
|
./scripts/subinstallers/suricata.sh
|
||||||
./scripts/subinstallers/iptables.sh
|
./scripts/subinstallers/iptables.sh
|
||||||
./scripts/subinstallers/ip6tables.sh
|
./scripts/subinstallers/ip6tables.sh
|
||||||
./scripts/subinstallers/iptables_docker.sh
|
./scripts/subinstallers/iptables_docker.sh
|
||||||
./scripts/subinstallers/suricata.sh
|
|
||||||
./scripts/subinstallers/iptables_cleanup.sh
|
./scripts/subinstallers/iptables_cleanup.sh
|
||||||
else
|
else
|
||||||
echo "iptables rules exist. Leaving alone."
|
echo "iptables rules exist. Leaving alone."
|
||||||
|
|||||||
@@ -1,5 +1,7 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
# minimal dependencies
|
# minimal dependencies
|
||||||
sudo -E apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev build-essential libpcap-dev \
|
sudo -E apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev build-essential libpcap-dev \
|
||||||
libyaml-0-2 libyaml-dev pkg-config zlib1g zlib1g-dev \
|
libyaml-0-2 libyaml-dev pkg-config zlib1g zlib1g-dev \
|
||||||
@@ -34,6 +36,6 @@ else
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
# iptables
|
# iptables
|
||||||
sudo iptables -A INPUT -j NFQUEUE
|
#sudo iptables -A INPUT -j NFQUEUE
|
||||||
sudo iptables -I FORWARD -j NFQUEUE
|
#sudo iptables -I FORWARD -j NFQUEUE
|
||||||
#sudo iptables -I OUTPUT -j NFQUEUE
|
#sudo iptables -I OUTPUT -j NFQUEUE
|
||||||
|
|||||||
Reference in New Issue
Block a user