2010-03-21 | Stephen Gran | restrict schroeder ssh, now with syntax Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-21 | Stephen Gran | restrict schroeder ssh Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-18 | Stephen Gran | add nixon key for pettersson Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-16 | Stephen Gran | stupid net-lsearch type Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-15 | Stephen Gran | allow local_part_suffixes in procmail router Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | enable the nf_ftp_conntrack hook Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | stop serving a broken file for now Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | and let's try pointing at the right file Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | and the inevitable syntax error Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | a stab at auto loading conntrack modules Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | add ferm to tchaikovsky Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-08 | Stephen Gran | restrict ssh to tchaikovsky Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | v6 rule is v6 Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | handel gets a firewall Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | try not to double include rietz when we do puppetize it Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | add rietz back into munin Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | match subnets that might exist Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | add https ferm rule to apache class for now Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | munin must run ip6 plugin as root as well Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | make v6ips fail more gracefully Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | get package name right Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | reshuffle where template is served from Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | bandwidth graphs for v6 Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | alphabetize Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | some whitespace cleanup and move template to base class Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | handle lack of v6 addresses nicely Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | some more no_munin hosts Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | more whitespace Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | whitespace nazi Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | get rid of way too many munin subclasses Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | confine ip addr fact to linux Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | yes, picky pain Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | since we log to ulog, we should probably install it Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | erm, time is tcp, ntp is udp Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | sigh Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | picky picky Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | allow time for ancina and zelenka Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | some more ferm fixups Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv... |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | buildd get minimal firewalls Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | this should be cool Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | Revert "we want counters" |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | get the ferm variable right Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | and add a nop rule for munin Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv... |
commit | commitdiff | tree |
2010-03-07 | Stephen Gran | new ipaddress fact Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | see if global_variables works Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | and not cause a syntax error Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | and actually ship it Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | add first stab at interfaces Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | try in place array, but with bonus for syntactic correctness Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | try in place array Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | restore stunnel rule Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | humph Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | first stab at http limit rules - how bad can it go? Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | piatti has ferm Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | let's see if this works Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | Revert "first stab at opening firewall for actual mail... |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | Revert "er, not a case statement" |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | er, not a case statement Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | first stab at opening firewall for actual mail port Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | add submission for mx machines Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | nagios also wants to talk smtp Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | convert ssh to new rule format Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | quoting, maybe Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | another try Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | restrict smtp Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-06 | Stephen Gran | beethoven has ferm Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-03-03 | Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv... |
commit | commitdiff | tree |
2010-03-03 | Stephen Gran | quiet can't find plugins noise Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-28 | Stephen Gran | add my ppp ip as well Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-28 | Stephen Gran | add fact for megaraid controllers Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-25 | Stephen Gran | Merge branch 'master' of ssh://handel.debian.org/srv... |
commit | commitdiff | tree |
2010-02-25 | Stephen Gran | strip some of the randomness Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | line wrap motd Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | stop doubling up an entry Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | add puppetmaster role Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | be a little more liberal about throwing away MS traffic Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | this should be empty for those hosters Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-24 | Stephen Gran | use the right list of hosts Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | move inclusion of samhain to the end of the block,... Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | clean up samhain template by role instead of by hostname Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | and even more carefully this time Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | skip hosts without ip addresses in ldap Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | bartok gets ferm Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | add debian hosts to the list Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | and recursors should allow localnets ... Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | name new class correctly Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | add bartok as recursor for manda Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | add bartok as a recursor Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | add local DNS recursor class Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | /etc/ferm is now also (kind of, almost) under puppet... Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | ferm.conf is now (kind of, almost) under puppet control Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | and name them usefully Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | use v4 for iptables and v6 for ip6tables Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | make MS ports quiet Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | add draghi as nagios host, as it needs to connect to... Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | try to make samhain quiet about ferm Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-23 | Stephen Gran | zobel! Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
2010-02-22 | Stephen Gran | quiet down, you Signed-off-by: Stephen Gran <steve@lobefin.net> |
commit | commitdiff | tree |
next |