ansible
/
xoxys.iptables
1
0
Fork 0
Code Issues Pull Requests Releases Activity

fix default rules
continuous-integration/drone/push Build is failing Details

This commit is contained in:
Robert Kaussow 2019-09-18 16:26:13 +02:00
parent 5998bb7582
commit 4bee99e638
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
molecule/ec2-centos-7/tests/test_default.py
View File

@ -23,11 +23,11 @@ def test_iptables_running_and_enabled(host):
def test_iptables_default_rules(host):
defaults = [
'-P INPUT ACCEPT',
'-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -i lo -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -j REJECT -m comment --comment "ansible[iptables_default_head]"'
'-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -i lo -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -p icmp --icmp-type echo-request -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -p tcp -m tcp --dport 22 -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -j REJECT'
]
rules = host.iptables.rules("filter", "INPUT")