2017-05-17 22:54:43 +00:00
|
|
|
---
|
2019-10-17 18:53:21 +00:00
|
|
|
# @var iptables_default_head:description: Default head (allow) rules.
|
2017-05-17 22:54:43 +00:00
|
|
|
iptables_default_head: |
|
|
|
|
-P INPUT ACCEPT
|
|
|
|
-P FORWARD ACCEPT
|
|
|
|
-P OUTPUT ACCEPT
|
|
|
|
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
|
|
-A INPUT -i lo -j ACCEPT
|
|
|
|
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
|
|
|
|
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
|
|
|
|
|
2019-10-17 18:53:21 +00:00
|
|
|
# @var iptables_default_tail:description: Default tail (deny) rules.
|
2017-05-17 22:54:43 +00:00
|
|
|
iptables_default_tail: |
|
|
|
|
-A INPUT -j REJECT
|
|
|
|
-A FORWARD -j REJECT
|
|
|
|
|
|
|
|
iptables_custom_rules: []
|
2019-10-28 19:30:54 +00:00
|
|
|
iptables_custom_rules_extra: []
|
2017-05-17 22:54:43 +00:00
|
|
|
|
2019-10-17 18:53:21 +00:00
|
|
|
# @var iptables_keep_unmanaged:description: >
|
2017-05-17 22:54:43 +00:00
|
|
|
# By default this role deletes all iptables rules which are not managed by Ansible.
|
|
|
|
# Set this to 'yes', if you want the role to keep unmanaged rules.
|
2019-10-17 18:53:21 +00:00
|
|
|
# @end
|
2017-05-17 22:54:43 +00:00
|
|
|
iptables_keep_unmanaged: no
|