Skip to content

Commit

Permalink
Added source_range 0.0.0.0/0 (any) to avoid rule violations (#776)
Browse files Browse the repository at this point in the history
* added source_range 0.0.0.0/0 (any) to avoid rule vaiolations that have restricted source ip address access set.

* fix typo

Co-authored-by: Cesar Rodriguez <cesar@accurics.com>
  • Loading branch information
menzbua and cesar-rodriguez committed May 18, 2021
1 parent 07c1e4f commit 940a446
Showing 1 changed file with 1 addition and 0 deletions.
Expand Up @@ -4,6 +4,7 @@ unrestrictedRdpAccess[api.id] {
api := input.google_compute_firewall[_]
api.config.direction == "INGRESS"
fire_rule := api.config.allow[_]
api.config.source_ranges[_] == "0.0.0.0/0"
fire_rule.protocol == "tcp"
fire_rule.ports[_] == "3389"
}

0 comments on commit 940a446

Please sign in to comment.