Add Firewall check

This commit is contained in:
Thomas Gebert 2025-10-01 10:15:40 +02:00
parent adcea4296f
commit 6dfffd9f0f

View File

@ -20,17 +20,43 @@ HEADER1
################################################################################
# Main Main Main
################################################################################
header1 "Check Firewall
# Our zones used are external and nterconnecti and client and the bond devices
# have to be attached to one of these"
${ANSIBLE_CMD} -b all -m shell \
-a 'for zone in external interconnect client; do
echo "### ${zone} ###"
echo -n "running: "
firewall-cmd --zone=external --list-interfaces
echo -n "permanent: "
firewall-cmd --permanent --zone=external --list-interfaces
echo ""
done'
header1 "Check NTP/Chrony
# - correct address/name
# - Reach is > 0"
${ANSIBLE_CMD} -b all -m shell -a "timedatectl"
${ANSIBLE_CMD} -b all -m shell -a "chronyc sources"
header1 "Check Mailing
# - correct relay address/name
# - correct sender address
# - correct recipient address"
${ANSIBLE_CMD} -b all -m shell -a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
${ANSIBLE_CMD} -b all -m shell \
-a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
header1 "Check Bonding"
${ANSIBLE_CMD} -b all -m shell \
-a 'for bond in /proc/net/bonding/bond*; do
echo "### ${bond##*/} ###"
egrep "Bonding Mode|MII Status|Slave Interface|Permanent HW addr|port state|Churn State|Aggregator ID" ${bond}
echo ""
done'
header1 "Do some generic tests with
# fs-manager check all"