Skip to content
This repository was archived by the owner on Feb 7, 2025. It is now read-only.

Commit

Permalink
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fixing tags
Browse files Browse the repository at this point in the history
@jcrichlake
jcrichlake committed Feb 21, 2024
1 parent 27c715b commit a9fff1d
Showing 1 changed file with 70 additions and 70 deletions.
140 changes: 70 additions & 70 deletions operations/template/net.tf
View file
Original file line number Diff line number Diff line change
@@ -82,115 +82,115 @@ resource "azurerm_network_security_group" "db_security_group" {


resource "azurerm_network_security_rule" "Splunk_UF_omhsinf" {
name = "Splunk_UF_omhsinf"
priority = 103
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "9997-9998"
source_address_prefixes = ["10.65.8.211/32","10.65.8.212/32","10.65.7.212/32","10.65.7.211/32","10.65.8.210/32","10.65.7.210/32"]
destination_address_prefix = "*"
name = "Splunk_UF_omhsinf"
priority = 103
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "9997-9998"
source_address_prefixes = ["10.65.8.211/32","10.65.8.212/32","10.65.7.212/32","10.65.7.211/32","10.65.8.210/32","10.65.7.210/32"]
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

resource "azurerm_network_security_rule" "Splunk_Indexer_Discovery_omhsinf" {
name = "Splunk_Indexer_Discovery_omhsinf"
priority = 104
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "8089"
source_address_prefix = "10.11.7.22/32"
destination_address_prefix = "*"
name = "Splunk_Indexer_Discovery_omhsinf"
priority = 104
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "8089"
source_address_prefix = "10.11.7.22/32"
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}


resource "azurerm_network_security_rule" "Safe_Encase_Monitoring_omhsinf" {
name = "Safe_Encase_Monitoring_omhsinf"
priority = 105
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "34445"
source_address_prefix = "10.11.6.145/32"
destination_address_prefix = "*"
name = "Safe_Encase_Monitoring_omhsinf"
priority = 105
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "34445"
source_address_prefix = "10.11.6.145/32"
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

resource "azurerm_network_security_rule" "ForeScout_Manager_omhsinf" {
name = "ForeScout_Manager_omhsinf"
priority = 106
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_ranges = ["556","443","10003-10006"]
source_address_prefixes = ["10.64.8.184","10.64.8.180/32"]
destination_address_prefix = "*"
name = "ForeScout_Manager_omhsinf"
priority = 106
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_ranges = ["556","443","10003-10006"]
source_address_prefixes = ["10.64.8.184","10.64.8.180/32"]
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

resource "azurerm_network_security_rule" "BigFix_omhsinf" {
name = "BigFix_omhsinf"
priority = 107
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "52314"
source_address_prefix = "10.11.4.84/32"
destination_address_prefix = "*"
name = "BigFix_omhsinf"
priority = 107
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "52314"
source_address_prefix = "10.11.4.84/32"
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}


resource "azurerm_network_security_rule" "Allow_All_Out_omhsinf" {
name = "Allow_All_Out_omhsinf"
priority = 109
direction = "Outbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
name = "Allow_All_Out_omhsinf"
priority = 109
direction = "Outbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_ranges = ["5432"]
source_address_prefixes = ["VIRTUALNETWORK"]
destination_address_prefix = "*"
source_address_prefix = "VirtualNetwork"
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

resource "azurerm_network_security_rule" "db_outbound_allow" {
name = "db_outbound_allow"
priority = 110
direction = "Outbound"
access = "Allow"
protocol = "*"
source_port_range = "*"
destination_port_range = "*"
source_address_prefix = "*"
destination_address_prefix = "*"
name = "db_outbound_allow"
priority = 110
direction = "Outbound"
access = "Allow"
protocol = "*"
source_port_range = "*"
destination_port_range = "*"
source_address_prefix = "*"
destination_address_prefix = "*"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

resource "azurerm_network_security_rule" "db_inbound_allow" {
name = "db_inbound_allow"
priority = 111
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
name = "db_inbound_allow"
priority = 111
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_ranges = ["5432"]
source_address_prefixes = ["VIRTUALNETWORK"]
destination_address_prefix = "VIRTUALNETWORK"
source_address_prefix = "VirtualNetwork"
destination_address_prefix = "VirtualNetwork"
resource_group_name = data.azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.db_security_group.name
}

0 comments on commit a9fff1d

Please sign in to comment.