Externalize role

This commit is contained in:
Adrien Reslinger 2018-10-08 19:27:53 +02:00
commit 860ebab454
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
5 changed files with 123 additions and 0 deletions

33
files/hosts.allow Normal file
View file

@ -0,0 +1,33 @@
#
# hosts.allow This file contains access rules which are used to
# allow or deny connections to network services that
# either use the tcp_wrappers library or that have been
# started through a tcp_wrappers-enabled xinetd.
#
# See 'man 5 hosts_options' and 'man 5 hosts_access'
# for information on rule syntax.
# See 'man tcpd' for information on tcp_wrappers
#
sshd:ALL
# Pour NFS
#portmap:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
#lockd:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
#mountd:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
#rquotad:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
#statd:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
# Pour Saned
#sane:172.16.0.0/255.255.255.0
# Pour ProFTPd
#in.ftpd:ALL
# Pour le tftp
#in.tftpd:172.16.0.0/255.255.255.0 192.168.1.1
# Pour VMware
#vmware-authd:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0
# Pour SNMP
#snmpd:172.16.0.0/255.255.255.0 172.16.2.0/255.255.255.0 172.16.255.0/255.255.255.0

14
files/hosts.deny Normal file
View file

@ -0,0 +1,14 @@
#
# hosts.deny This file contains access rules which are used to
# deny connections to network services that either use
# the tcp_wrappers library or that have been
# started through a tcp_wrappers-enabled xinetd.
#
# The rules in this file can also be set up in
# /etc/hosts.allow with a 'deny' option instead.
#
# See 'man 5 hosts_options' and 'man 5 hosts_access'
# for information on rule syntax.
# See 'man tcpd' for information on tcp_wrappers
#
ALL:ALL EXCEPT 127.0.0.1:DENY