This will also automatically trigger the download of the latest MineMeld packages. Install the MineMeld infrastructure package via apt. We have to install them before installing MineMeld package to avoid configuration conflicts: sudo apt install -y nginx redis-server Sudo add-apt-repository "deb xenial-minemeld main" Key fingerprint = E558 CE6E 3968 0F31 8F6C BFAC B401 E02E DD0D A1F9Īdd the MineMeld APT repo to the system list and update the apt cache: Sudo bash -c "ip6tables-save > /etc/iptables/rules.v6"Īdd the MineMeld repo GPG key to the APT trusted keyring:ĭouble check the GPG key fingerprint, to make sure it is matching the official MineMeld GPG key (fingerprint should match characters in bold):Įxecuting: gpg -ignore-time-conflict -no-options -no-default-keyring -homedir /tmp/tmp.W74MaAG3pI -no-auto-check-trustdb -trust-model always -keyring /etc/apt/trusted.gpg -primary-keyring /etc/apt/trusted.gpg -fingerprint DD0DA1F9 Sudo bash -c "iptables-save > /etc/iptables/rules.v4" Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 11 -j ACCEPT Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 8 -j ACCEPT Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 3 -j ACCEPT Sudo iptables -A INPUT -p icmp -m icmp -icmp-type 0 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 13514 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 443 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 80 -j ACCEPT Sudo iptables -A INPUT -p tcp -m tcp -dport 22 -j ACCEPT Sudo iptables -A INPUT -m conntrack -ctstate RELATED,ESTABLISHED -j ACCEPT Also these rules drop all IPv6 traffic, if you are running MineMeld in an IPv6 network make sure you change the suggested rules. You can use the following commands to configure iptables to allow sessions on ports used by MineMeld.
sudo apt update & sudo apt dist-upgrade -y
Update all the packages of the instance before installing. Note: Binary packages are only available for 64 bits architectures.įirst thing you should harden your new instance. Please read this article to learn about our recommended migration options.Īn easy way to use MineMeld is installing the binary packages on an Ubuntu 16.04 instance.
Note: Palo Alto Networks made an end-of-life announcement about the MineMeld™ application in AutoFocus™ on August 1, 2021.
0 kommentar(er)
