mirror of
https://github.com/hardenedlinux/harbian-audit.git
synced 2025-07-31 01:24:58 +02:00
Use case document
nginx-mutual-ssl-proxy-tcp-udp
How to use harbian-audit to audit and apply
Server node
# iptables-restore iptables_ufw-4-server.cfg
# bash bin/hardening.sh --audit-all
This is set special service to exception(6.2 6.3 6.10)
# bash bin/hardening.sh --set-hardening-level 5 --allow-service dns,http,cups
# bash bin/hardening.sh --audit-all
# bash bin/hardening.sh --apply
Client node
# iptables-restore iptables_ufw-4-client.cfg
# bash bin/hardening.sh --audit-all
This is set special service to exception(6.10)
# bash bin/hardening.sh --set-hardening-level 5 --allow-service http
# bash bin/hardening.sh --audit-all
# bash bin/hardening.sh --apply