BigBlueButton hardening - Versionsgeschichte

Niklas.guenauer: /* Script */

2020-10-26T15:58:23Z

Script

2020-10-26T14:57:03Z

Unit

2020-10-26T10:12:48Z

Check

2020-10-26T09:59:54Z

Download

2020-10-26T09:58:54Z

Unit

2020-10-26T09:54:27Z

Unit

2020-10-26T09:53:06Z

Check

2020-10-26T09:52:57Z

HSTS

2020-10-26T09:52:24Z

HSTS

2020-10-26T09:45:09Z

Unit

@@ Zeile 16: / Zeile 16: @@
 iptables -A INPUT -p tcp --dport 443 -j ACCEPT
 iptables -A INPUT -p tcp --dport 1935 -j ACCEPT
 iptables -A INPUT -p tcp --dport 7443 -j ACCEPT
 iptables -A INPUT -p udp --dport 16384:32768 -j ACCEPT
 iptables -A INPUT -j LOG --log-prefix " --ipt-in-- "
 ;;
@@ Zeile 25: / Zeile 30: @@
 esac
 </pre>
 ==Unit==
 */etc/systemd/system/firewall.service

@@ Zeile 26: / Zeile 26: @@
 </pre>
 ==Unit==
-*/etc/system/system/firewall.service
+*/etc/systemd/system/firewall.service
 <pre>
 [Unit]
@@ Zeile 41: / Zeile 41: @@
 WantedBy=multi-user.target
 </pre>
 ==Download==
 [[Datei:firewall.tar.gz]]

← Nächstältere Version		Version vom 26. Oktober 2020, 10:12 Uhr
Zeile 54:		Zeile 54:
	==Check==		==Check==
	*curl -s -D- https://video.xinux.de/ \| grep -i Strict		*curl -s -D- https://video.xinux.de/ \| grep -i Strict
		+	=Links=
		+	*https://andersgood.de/blog/bigbluebutton-auch-hinter-firewalls-nutzen

@@ Zeile 42: / Zeile 42: @@
 </pre>
 ==Download==
-[[Datei:firewall.tgz]]
+[[Datei:firewall.tar.gz]]
 ==Activate==

@@ Zeile 41: / Zeile 41: @@
 WantedBy=multi-user.target
 </pre>
 ==Activate==
 *systemctl daemon-reload

@@ Zeile 45: / Zeile 45: @@
 *systemctl restart nginx
 ==Check==
-*curl -s -D- https://xinux.de/ | grep -i Strict
+*curl -s -D- https://video.xinux.de/ | grep -i Strict

← Nächstältere Version		Version vom 26. Oktober 2020, 09:52 Uhr
Zeile 44:		Zeile 44:
	*sed -ie '/ssl_dhparam/aadd_header Strict-Transport-Security "max-age=63072000; includeSubdomains;";' /etc/nginx/sites-enabled/bigbluebutton		*sed -ie '/ssl_dhparam/aadd_header Strict-Transport-Security "max-age=63072000; includeSubdomains;";' /etc/nginx/sites-enabled/bigbluebutton
	*systemctl restart nginx		*systemctl restart nginx
		+	==Check==
		+	*curl -s -D- https://xinux.de/ \| grep -i Strict

← Nächstältere Version		Version vom 26. Oktober 2020, 09:52 Uhr
Zeile 42:		Zeile 42:
	</pre>		</pre>
	=HSTS=		=HSTS=
		+	*sed -ie '/ssl_dhparam/aadd_header Strict-Transport-Security "max-age=63072000; includeSubdomains;";' /etc/nginx/sites-enabled/bigbluebutton
		+	*systemctl restart nginx