|
@ -28,6 +28,7 @@ apt-get install -y make screen gcc git mercurial libc6-dev pkg-config libgmp-dev |
|
|
|
|
|
|
|
|
# set up firewall |
|
|
# set up firewall |
|
|
echo "ENABLE FIREWALL ..." |
|
|
echo "ENABLE FIREWALL ..." |
|
|
|
|
|
set -x |
|
|
# white list ssh access |
|
|
# white list ssh access |
|
|
for ip in "${WHITELIST[@]}"; do |
|
|
for ip in "${WHITELIST[@]}"; do |
|
|
ufw allow from $ip to any port $SSH_PORT |
|
|
ufw allow from $ip to any port $SSH_PORT |
|
@ -40,7 +41,9 @@ for port in "${OPEN_PORTS[@]}"; do |
|
|
ufw allow $port |
|
|
ufw allow $port |
|
|
done |
|
|
done |
|
|
# apply |
|
|
# apply |
|
|
ufw enable |
|
|
|
|
|
|
|
|
ufw --force enable |
|
|
|
|
|
set +x |
|
|
|
|
|
# set up firewall END |
|
|
|
|
|
|
|
|
# watch the logs and have them emailed to me |
|
|
# watch the logs and have them emailed to me |
|
|
# apt-get install -y logwatch |
|
|
# apt-get install -y logwatch |
|
|