5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
# File 'manifests/firewall/windows.pp', line 5
class remediate_install::firewall::windows {
class { 'windows_firewall': ensure => 'running' }
windows_firewall::exception { 'REMWEB':
ensure => present,
direction => 'in',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 8443,
remote_port => 'any',
display_name => 'Remediate web console access',
description => 'Inbound rule for acess to Remediate console (Port 8443)',
}
windows_firewall::exception { 'WINRM-fallback in':
ensure => present,
direction => 'in',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 5985,
remote_port => 'any',
display_name => 'Windows Remote Management fallback HTTP-In',
description => 'Inbound rule for Windows Remote Management via WS-Management. [TCP 5985]',
}
windows_firewall::exception { 'WINRM-fallback out':
ensure => present,
direction => 'out',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 5985,
remote_port => 'any',
display_name => 'Windows Remote Management fallback HTTP-out',
description => 'Inbound rule for Windows Remote Management via WS-Management. [TCP 5985]',
}
windows_firewall::exception { 'WINRM in':
ensure => present,
direction => 'in',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 5986,
remote_port => 'any',
display_name => 'Windows Remote Management HTTP-In',
description => 'Inbound rule for Windows Remote Management via WS-Management. [TCP 5986]',
}
windows_firewall::exception { 'WINRM out':
ensure => present,
direction => 'out',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 5986,
remote_port => 'any',
display_name => 'Windows Remote Management HTTP-out',
description => 'Inbound rule for Windows Remote Management via WS-Management. [TCP 5986]',
}
windows_firewall::exception { 'REM-SSH-OUT':
ensure => present,
direction => 'out',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 'any',
remote_port => 22,
display_name => 'Remediate SSH outbound access',
description => 'Outbound rule for ssh access.',
}
windows_firewall::exception { 'REM-HTPS-OUT':
ensure => present,
direction => 'out',
action => 'allow',
enabled => true,
protocol => 'TCP',
local_port => 'any',
remote_port => 443,
display_name => 'Remediate HTTPS outbound access',
description => 'Outbound rule for HTTPS access.',
}
}
|