<<

NAME

pf::pfcmd::checkup - pfcmd's checkup tasks

DESCRIPTION

This modules holds all the tests performed by 'pfcmd checkup' which is a general configuration sanity test.

SUBROUTINES

add_problem

Add a problem to the problem list.

add_problem( severity, message );

sanity_check

Returns an array of hashes of the form ( $SEVERITY => ... , $MESSAGE => ... )

interfaces_defined

check the config file to make sure interfaces are fully defined

interfaces

check the Netmask objs and make sure a managed and internal interface exist

freeradius

Validation related to the FreeRADIUS daemon

fingerbank

Validation to make sure Fingerbank outside lib symlink is present

ids

Validation related to the Snort/Suricata IDS usage

scan

Validation related to the vulnerability scanning engine option.

scan_openvas

Validation related to the OpenVAS vulnerability scanning engine usage.

network

Configuration validation of the network portion of the config

network_inline

Tests that validate the configuration of an inline network.

inline

If some interfaces are configured to run in inline enforcement then these tests will run

database

database check

web_admin

Web Administration interface checks

registration

Registration configuration sanity

extensions

Performs version checking of the extension points.

permissions

Checking some important permissions

apache

Apache related tests

violations

Checking for violations configurations

switches

Checking for switches configurations

billing

Validation related to the billing engine feature.

guests

Guest-related Checks

unsupported

Feature that we know don't work under certain circumstances (or other features activated)

portal_profiles

Make sure that portal profiles, if defined, have a filter and no unsupported parameters.

Make sure only one external authentication source is selected for each type.

vlan_filter_rules

Make sure that the minimum parameters have been defined in vlan filter rules

apache_filter_rules

Make sure that the minimum parameters have been defined in apache filter rules

AUTHOR

Inverse inc. <info@inverse.ca>

COPYRIGHT

Copyright (C) 2005-2015 Inverse inc.

LICENSE

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

<<