This commit is contained in:
parent
a7ba3b4072
commit
69a58a8cd7
@ -22,12 +22,12 @@ def test_iptables_running_and_enabled(host):
|
||||
|
||||
def test_iptables_default_rules(host):
|
||||
defaults = [
|
||||
"-P INPUT ACCEPT",
|
||||
"-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT",
|
||||
"-A INPUT -i lo -j ACCEPT",
|
||||
"-A INPUT -p icmp --icmp-type echo-request -j ACCEPT",
|
||||
"-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT",
|
||||
"-A INPUT -j REJECT"
|
||||
'-P INPUT ACCEPT',
|
||||
'-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||
'-A INPUT -i lo -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||
'-A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||
'-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -m comment --comment "ansible[iptables_default_head]"',
|
||||
'-A INPUT -j REJECT -m comment --comment "ansible[iptables_default_head]"'
|
||||
]
|
||||
|
||||
rules = host.iptables.rules("filter", "INPUT")
|
||||
|
Loading…
Reference in New Issue
Block a user