This commit is contained in:
parent
a7ba3b4072
commit
69a58a8cd7
@ -22,12 +22,12 @@ def test_iptables_running_and_enabled(host):
|
|||||||
|
|
||||||
def test_iptables_default_rules(host):
|
def test_iptables_default_rules(host):
|
||||||
defaults = [
|
defaults = [
|
||||||
"-P INPUT ACCEPT",
|
'-P INPUT ACCEPT',
|
||||||
"-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT",
|
'-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||||
"-A INPUT -i lo -j ACCEPT",
|
'-A INPUT -i lo -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||||
"-A INPUT -p icmp --icmp-type echo-request -j ACCEPT",
|
'-A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||||
"-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT",
|
'-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||||
"-A INPUT -j REJECT"
|
'-A INPUT -j REJECT -m comment --comment "ansible[iptables_default_head]"'
|
||||||
]
|
]
|
||||||
|
|
||||||
rules = host.iptables.rules("filter", "INPUT")
|
rules = host.iptables.rules("filter", "INPUT")
|
||||||
|
Loading…
Reference in New Issue
Block a user