ansible/xoxys.iptables
1
0
Fork 0
Code Issues Pull Requests Releases Activity

commit 6e54f867b6

Browse Source 
Author: Robert Kaussow <mail@thegeeklab.de>
Date:   Thu Mar 3 21:15:40 2022 +0100

    chore: add auto-generated _docs folder to gitignore file
This commit is contained in:
Robert Kaussow 2022-03-03 20:24:58 +00:00
parent d82f6cc171
commit 4c388e8199
1 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
index.md
View File

@ -3,18 +3,18 @@ title: iptables
type: docs type: docs
--- ---
[![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE) [![Source Code](https://img.shields.io/badge/gitea-source%20code-blue?logo=gitea&logoColor=white)](https://gitea.rknet.org/ansible/xoxys.logrotate) [![Build Status](https://img.shields.io/drone/build/ansible/xoxys.logrotate?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/ansible/xoxys.logrotate) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/ansible/xoxys.iptables/src/branch/master/LICENSE)
Role to manage iptables firewall. Role to manage iptables firewall.
* [Default Variables](#default-variables) - [Default Variables](#default-variables)
* [iptables_app_rules](#iptables_app_rules) - [iptables_app_rules](#iptables_app_rules)
* [iptables_app_rules_extra](#iptables_app_rules_extra) - [iptables_app_rules_extra](#iptables_app_rules_extra)
* [iptables_custom_rules](#iptables_custom_rules) - [iptables_custom_rules](#iptables_custom_rules)
* [iptables_default_head](#iptables_default_head) - [iptables_default_head](#iptables_default_head)
* [iptables_default_tail](#iptables_default_tail) - [iptables_default_tail](#iptables_default_tail)
* [iptables_keep_unmanaged](#iptables_keep_unmanaged) - [iptables_keep_unmanaged](#iptables_keep_unmanaged)
* [Dependencies](#dependencies) - [Dependencies](#dependencies)
--- ---
@ -51,10 +51,14 @@ Default head (allow) rules.
#### Default value #### Default value
```YAML ```YAML
iptables_default_head: "-P INPUT ACCEPT\n-P FORWARD ACCEPT\n-P OUTPUT ACCEPT\n-A INPUT\ iptables_default_head: |
\ -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -i lo -j ACCEPT\n-A INPUT\ -P INPUT ACCEPT
\ -p icmp --icmp-type echo-request -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 22\ -P FORWARD ACCEPT
\ -j ACCEPT\n" -P OUTPUT ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
``` ```
### iptables_default_tail ### iptables_default_tail
@ -64,7 +68,9 @@ Default tail (deny) rules.
#### Default value #### Default value
```YAML ```YAML
iptables_default_tail: "-A INPUT -j REJECT\n-A FORWARD -j REJECT\n" iptables_default_tail: |
-A INPUT -j REJECT
-A FORWARD -j REJECT
``` ```
### iptables_keep_unmanaged ### iptables_keep_unmanaged
@ -77,6 +83,8 @@ By default this role deletes all iptables rules which are not managed by Ansible
iptables_keep_unmanaged: no iptables_keep_unmanaged: no
``` ```
## Dependencies ## Dependencies
None. None.