Skip to content

Latest commit

 

History

History
21 lines (15 loc) · 890 Bytes

firewall.rst

File metadata and controls

21 lines (15 loc) · 890 Bytes
Raw

Firewall

Setup defaults to only allowing port 22 (ssh)

When you run Setup, it defaults to locking down the local ufw firewall to only allowing port 22 (ssh). There is a note at the end of Setup that tells you this and lets you know that, if you need to allow connections on other ports, you can run the so-allow utility.

Sensors automatically add their own firewall rules to the master server

When you run Setup on a sensor-only installation, it will ssh to the master server and add new firewall rules to the master server to allow the sensor to connect on the following ports:

  • 22/tcp (ssh)
  • 4505/tcp (salt)
  • 4506/tcp (salt)
  • 7736/tcp (sguil)

UFW

For more information about ufw, please see https://help.ubuntu.com/community/UFW.