From 4c388e81998b53a7570ac1e4cc7bf0438a639321 Mon Sep 17 00:00:00 2001 From: Robert Kaussow Date: Thu, 3 Mar 2022 20:24:58 +0000 Subject: [PATCH] commit 6e54f867b6d9e65c36bf5599d03c0071aa205e1f Author: Robert Kaussow Date: Thu Mar 3 21:15:40 2022 +0100 chore: add auto-generated _docs folder to gitignore file --- index.md | 36 ++++++++++++++++++++++-------------- 1 file changed, 22 insertions(+), 14 deletions(-) diff --git a/index.md b/index.md index 7d5b926..f62469f 100644 --- a/index.md +++ b/index.md @@ -3,18 +3,18 @@ title: iptables type: docs --- -[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE) +[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE) Role to manage iptables firewall. -* [Default Variables](#default-variables) - * [iptables_app_rules](#iptables_app_rules) - * [iptables_app_rules_extra](#iptables_app_rules_extra) - * [iptables_custom_rules](#iptables_custom_rules) - * [iptables_default_head](#iptables_default_head) - * [iptables_default_tail](#iptables_default_tail) - * [iptables_keep_unmanaged](#iptables_keep_unmanaged) -* [Dependencies](#dependencies) +- [Default Variables](#default-variables) + - [iptables_app_rules](#iptables_app_rules) + - [iptables_app_rules_extra](#iptables_app_rules_extra) + - [iptables_custom_rules](#iptables_custom_rules) + - [iptables_default_head](#iptables_default_head) + - [iptables_default_tail](#iptables_default_tail) + - [iptables_keep_unmanaged](#iptables_keep_unmanaged) +- [Dependencies](#dependencies) --- @@ -51,10 +51,14 @@ Default head (allow) rules. #### Default value ```YAML -iptables_default_head: "-P INPUT ACCEPT\n-P FORWARD ACCEPT\n-P OUTPUT ACCEPT\n-A INPUT\ - \ -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -i lo -j ACCEPT\n-A INPUT\ - \ -p icmp --icmp-type echo-request -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 22\ - \ -j ACCEPT\n" +iptables_default_head: | + -P INPUT ACCEPT + -P FORWARD ACCEPT + -P OUTPUT ACCEPT + -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT + -A INPUT -i lo -j ACCEPT + -A INPUT -p icmp --icmp-type echo-request -j ACCEPT + -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT ``` ### iptables_default_tail @@ -64,7 +68,9 @@ Default tail (deny) rules. #### Default value ```YAML -iptables_default_tail: "-A INPUT -j REJECT\n-A FORWARD -j REJECT\n" +iptables_default_tail: | + -A INPUT -j REJECT + -A FORWARD -j REJECT ``` ### iptables_keep_unmanaged @@ -77,6 +83,8 @@ By default this role deletes all iptables rules which are not managed by Ansible iptables_keep_unmanaged: no ``` + + ## Dependencies None.