1db6d066c0
- Body SolidWorks v1 → 02_PRODUITS_PHYSIQUES/Microphone/Conception/ - Studio Mic KiCAD (DIYPerks) → 02_PRODUITS_PHYSIQUES/R&D_References/DIY/ - cleanup_ports.sh → 04_INFRA_DEPLOIEMENT/ - mockup_jeu_ux → 11_RECHERCHE_&_LAB/ - Printables → 12_DOCUMENTATION/Imprimables/ - Screenshots, ideas, one.html → _BROUILLON/ - all-talas (23Go) → 13_ARCHIVES/ - Supprimé all-talas.zip (20Go doublon), lock files LibreOffice - Nettoyé .gitignore - Remote → Forgejo (10.0.20.105:3000) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
54 lines
1.6 KiB
Bash
Executable file
54 lines
1.6 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
echo "=== 🔥 HARDENING PORTS FEDORA ==="
|
|
|
|
# 1. Firewall ON + reset
|
|
echo "[+] Configuration firewall..."
|
|
sudo systemctl enable --now firewalld
|
|
sudo firewall-cmd --set-default-zone=public
|
|
sudo firewall-cmd --permanent --add-service=ssh
|
|
sudo firewall-cmd --reload
|
|
|
|
# 2. Stop Docker containers (gros nettoyage ports)
|
|
echo "[+] Arrêt des containers Docker..."
|
|
if command -v docker &> /dev/null; then
|
|
docker stop $(docker ps -q) 2>/dev/null
|
|
fi
|
|
|
|
# 3. Désactiver Docker au démarrage (optionnel mais safe)
|
|
echo "[+] Désactivation Docker au boot..."
|
|
sudo systemctl disable docker --now
|
|
|
|
# 4. Désactiver services réseau inutiles
|
|
echo "[+] Désactivation services inutiles..."
|
|
|
|
sudo systemctl disable --now wsdd 2>/dev/null
|
|
sudo systemctl disable --now avahi-daemon 2>/dev/null
|
|
sudo systemctl disable --now cups 2>/dev/null
|
|
sudo systemctl disable --now passim 2>/dev/null
|
|
|
|
# 5. Kill des serveurs node exposés
|
|
echo "[+] Nettoyage des serveurs Node exposés..."
|
|
for pid in $(ss -tulnp | grep LISTEN | grep node | awk -F'pid=' '{print $2}' | cut -d',' -f1); do
|
|
echo "Killing Node PID $pid"
|
|
kill -9 $pid 2>/dev/null
|
|
done
|
|
|
|
# 6. Kill ports exposés non désirés (hors localhost)
|
|
echo "[+] Fermeture des ports publics suspects..."
|
|
for pid in $(ss -tulnp | grep LISTEN | grep "0.0.0.0" | grep -v sshd | awk -F'pid=' '{print $2}' | cut -d',' -f1); do
|
|
echo "Killing PID $pid"
|
|
kill -9 $pid 2>/dev/null
|
|
done
|
|
|
|
# 7. Désactiver IP forwarding
|
|
echo "[+] Désactivation IP forwarding..."
|
|
sudo sysctl -w net.ipv4.ip_forward=0
|
|
|
|
# 8. Résumé
|
|
echo ""
|
|
echo "=== ✅ ETAT FINAL ==="
|
|
ss -tulnp | grep LISTEN
|
|
|
|
echo ""
|
|
echo "🔥 Nettoyage terminé"
|