This commit is contained in:
parent
5998bb7582
commit
4bee99e638
@ -23,11 +23,11 @@ def test_iptables_running_and_enabled(host):
|
|||||||
def test_iptables_default_rules(host):
|
def test_iptables_default_rules(host):
|
||||||
defaults = [
|
defaults = [
|
||||||
'-P INPUT ACCEPT',
|
'-P INPUT ACCEPT',
|
||||||
'-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
'-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
|
||||||
'-A INPUT -i lo -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
'-A INPUT -i lo -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
|
||||||
'-A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
'-A INPUT -p icmp --icmp-type echo-request -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
|
||||||
'-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
'-A INPUT -p tcp -m tcp --dport 22 -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
|
||||||
'-A INPUT -j REJECT -m comment --comment "ansible[iptables_default_head]"'
|
'-A INPUT -j REJECT'
|
||||||
]
|
]
|
||||||
|
|
||||||
rules = host.iptables.rules("filter", "INPUT")
|
rules = host.iptables.rules("filter", "INPUT")
|
||||||
|
Loading…
Reference in New Issue
Block a user