Jose MartinezandClaude Sonnet 4.6
cb77482368
- Rename sites/bcn01/ -> sites/BCN01-LAB/ - Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate - Rename Terraform module: bcn01 -> bcn01_lab - Update working-directory in apply.yml and plan.yml - Update job/step names to BCN01-LAB NOTA: mover manualmente en S3 el objeto bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate antes de hacer terraform init en el nuevo directorio. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
34 lines
885 B
HCL
Executable File
34 lines
885 B
HCL
Executable File
# Reglas de firewall L3
|
|
firewall_rules = [
|
|
{
|
|
comment = "Bloqueo temporal switch a 8.8.8.8"
|
|
policy = "deny"
|
|
protocol = "any"
|
|
src_cidr = "192.168.8.50/32"
|
|
src_port = "any"
|
|
dest_cidr = "8.8.8.8/32"
|
|
dest_port = "any"
|
|
syslog_enabled = false
|
|
},
|
|
{
|
|
comment = "Bloqueo especifico DNS Cloudflare 1.1.1.1 desde VC"
|
|
policy = "deny"
|
|
protocol = "any"
|
|
src_cidr = "10.2.48.0/24" # VLAN 102 - VC
|
|
src_port = "any"
|
|
dest_cidr = "1.1.1.1/32"
|
|
dest_port = "any"
|
|
syslog_enabled = false
|
|
},
|
|
{
|
|
comment = "Denegar el resto del trafico de salida"
|
|
policy = "deny"
|
|
protocol = "any"
|
|
src_cidr = "any"
|
|
src_port = "any"
|
|
dest_cidr = "any"
|
|
dest_port = "any"
|
|
syslog_enabled = false
|
|
}
|
|
]
|