{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1113","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1113/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1113/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1113/events","html_url":"https://github.com/freedomofpress/securedrop/pull/1113","id":107048534,"number":1113,"title":"Update Network Firewall docs","user":{"login":"garrettr","id":407302,"avatar_url":"https://avatars.githubusercontent.com/u/407302?v=3","gravatar_id":"","url":"https://api.github.com/users/garrettr","html_url":"https://github.com/garrettr","followers_url":"https://api.github.com/users/garrettr/followers","following_url":"https://api.github.com/users/garrettr/following{/other_user}","gists_url":"https://api.github.com/users/garrettr/gists{/gist_id}","starred_url":"https://api.github.com/users/garrettr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garrettr/subscriptions","organizations_url":"https://api.github.com/users/garrettr/orgs","repos_url":"https://api.github.com/users/garrettr/repos","events_url":"https://api.github.com/users/garrettr/events{/privacy}","received_events_url":"https://api.github.com/users/garrettr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-17T18:49:42Z","updated_at":"2015-09-17T20:25:20Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/freedomofpress/securedrop/pulls/1113","html_url":"https://github.com/freedomofpress/securedrop/pull/1113","diff_url":"https://github.com/freedomofpress/securedrop/pull/1113.diff","patch_url":"https://github.com/freedomofpress/securedrop/pull/1113.patch"},"body":"Updated Network firewall docs, fully tested with a 0.3.5 release candidate on hardware.\r\n\r\nThis incorporates @harlo's commits from #1108, which documents *both* the old 3-NIC configuration (based on the Netgate APU 2) and the new 4-NIC configuration (based on the SG-2440). In addition, it:\r\n\r\n* Clarifies a lot of wording based on doing a test install and following these docs word for word\r\n* Removes references to the pfSense Guide because the link to the PDF broke\r\n* Provides recommendations and documents the process for keeping pfSense up to date\r\n* Recommends adding DNS servers to the Manual networking configuration on the Admin Workstation to avoid problems with launching the Unsafe Browser in subsequent sessions.\r\n* Fixes the NTP firewall rules, which were incorrectly restricting the source port to 123"},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/141217526","html_url":"https://github.com/freedomofpress/securedrop/pull/1113#issuecomment-141217526","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/1113","id":141217526,"user":{"login":"conorsch","id":657862,"avatar_url":"https://avatars.githubusercontent.com/u/657862?v=3","gravatar_id":"","url":"https://api.github.com/users/conorsch","html_url":"https://github.com/conorsch","followers_url":"https://api.github.com/users/conorsch/followers","following_url":"https://api.github.com/users/conorsch/following{/other_user}","gists_url":"https://api.github.com/users/conorsch/gists{/gist_id}","starred_url":"https://api.github.com/users/conorsch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/conorsch/subscriptions","organizations_url":"https://api.github.com/users/conorsch/orgs","repos_url":"https://api.github.com/users/conorsch/repos","events_url":"https://api.github.com/users/conorsch/events{/privacy}","received_events_url":"https://api.github.com/users/conorsch/received_events","type":"User","site_admin":false},"created_at":"2015-09-17T20:25:20Z","updated_at":"2015-09-17T20:25:20Z","body":"Excellent rewrite. Axing the outdated iptables example for a redacted XML dump of the pfSense config is a big improvement. I'm reminded that our Ansible playbooks don't currently support configuration of secondary DNS servers—I'll open an issue."}}