fix default rules
Some checks failed
continuous-integration/drone/push Build is failing

This commit is contained in:
Robert Kaussow 2019-09-18 16:26:13 +02:00
parent 5998bb7582
commit 4bee99e638

View File

@ -23,11 +23,11 @@ def test_iptables_running_and_enabled(host):
def test_iptables_default_rules(host):
defaults = [
'-P INPUT ACCEPT',
'-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -i lo -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
'-A INPUT -j REJECT -m comment --comment "ansible[iptables_default_head]"'
'-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -i lo -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -p icmp --icmp-type echo-request -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -p tcp -m tcp --dport 22 -m comment --comment "ansible[iptables_default_head]" -j ACCEPT',
'-A INPUT -j REJECT'
]
rules = host.iptables.rules("filter", "INPUT")