ansible
/
xoxys.iptables
1
0
Fork 0
Code Issues Pull Requests Releases Activity

commit 6e54f867b6 

Author: Robert Kaussow <mail@thegeeklab.de>
Date:   Thu Mar 3 21:15:40 2022 +0100

    chore: add auto-generated _docs folder to gitignore file
This commit is contained in:
Robert Kaussow 2022-03-03 20:24:58 +00:00
parent d82f6cc171
commit 4c388e8199
1 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
index.md
View File

@ -3,18 +3,18 @@ title: iptables
type: docs
---
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE)
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE)
Role to manage iptables firewall.
* [Default Variables](#default-variables)
* [iptables_app_rules](#iptables_app_rules)
* [iptables_app_rules_extra](#iptables_app_rules_extra)
* [iptables_custom_rules](#iptables_custom_rules)
* [iptables_default_head](#iptables_default_head)
* [iptables_default_tail](#iptables_default_tail)
* [iptables_keep_unmanaged](#iptables_keep_unmanaged)
* [Dependencies](#dependencies)
- [Default Variables](#default-variables)
- [iptables_app_rules](#iptables_app_rules)
- [iptables_app_rules_extra](#iptables_app_rules_extra)
- [iptables_custom_rules](#iptables_custom_rules)
- [iptables_default_head](#iptables_default_head)
- [iptables_default_tail](#iptables_default_tail)
- [iptables_keep_unmanaged](#iptables_keep_unmanaged)
- [Dependencies](#dependencies)
---
@ -51,10 +51,14 @@ Default head (allow) rules.
#### Default value
```YAML
iptables_default_head: "-P INPUT ACCEPT\n-P FORWARD ACCEPT\n-P OUTPUT ACCEPT\n-A INPUT\
\ -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -i lo -j ACCEPT\n-A INPUT\
\ -p icmp --icmp-type echo-request -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 22\
\ -j ACCEPT\n"
iptables_default_head: |
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
```
### iptables_default_tail
@ -64,7 +68,9 @@ Default tail (deny) rules.
#### Default value
```YAML
iptables_default_tail: "-A INPUT -j REJECT\n-A FORWARD -j REJECT\n"
iptables_default_tail: |
-A INPUT -j REJECT
-A FORWARD -j REJECT
```
### iptables_keep_unmanaged
@ -77,6 +83,8 @@ By default this role deletes all iptables rules which are not managed by Ansible
iptables_keep_unmanaged: no
```
## Dependencies
None.