https://github.com/europ/csirt-mu-hw1

CSIRT-MU Homework 1
https://github.com/europ/csirt-mu-hw1

ansible ansible-playbook csirt-mu debian debian9 iptables iptables-persistent playbook

Last synced: about 10 hours ago
JSON representation

CSIRT-MU Homework 1

• Host: GitHub
• URL: https://github.com/europ/csirt-mu-hw1
• Owner: europ
• Created: 2019-06-13T14:22:37.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2019-06-30T17:10:43.000Z (over 5 years ago)
• Last Synced: 2023-10-20T19:44:44.643Z (about 1 year ago)
• Topics: ansible, ansible-playbook, csirt-mu, debian, debian9, iptables, iptables-persistent, playbook
• Language: Shell
• Homepage:
• Size: 6.84 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# CSIRT-MU Homework 1

A simple homework for Ansible playbook.

### Task

The task can be found [here](https://github.com/europ/CSIRT-MU-HW1/blob/master/task.txt) in Czech.

### Prerequisites

1. Debian GNU/Linux 9.9.0

    * [debian-live-9.9.0-amd64-gnome.iso](https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-9.9.0-amd64-gnome.iso)

2. Ansible

    * ansible-playbook 2.8.1

3. superuser `root` has ssh key pair

    * generated via `ssh-keygen`

    * stored in `/.ssh/`

        * `id_rsa.pub`

        * `id_rsa`

4. netfilter-persistent apt package

    * [packages.debian.org/en/stretch/netfilter-persistent](https://packages.debian.org/en/stretch/netfilter-persistent)

    * NOTE: this will be installed via Ansible playbook [here](https://github.com/europ/CSIRT-MU-HW1/blob/master/playbook.yml#L17)

### Run

The Ansible playbook requires root privileges. Run the following commands as root.

```sh

# reset policies and flush all rules for all chains of IPv4 and IPv6

./reset-net.sh

# list policies and all rules for all chains of IPv4 and IPv6

./list-net.sh

# run Ansible playbook

ansible-playbook playbook.yml

# list policies and all rules for all chains of IPv4 and IPv6

./list-net.sh

```