diff --git a/tasks/config.yml b/tasks/config.yml index c21bb2a..6e25393 100644 --- a/tasks/config.yml +++ b/tasks/config.yml @@ -23,3 +23,12 @@ state: present rules: '{{ iptables_default_head }}' tags: iptables + +- name: Set default iptables tail rules + iptables_raw: + name: iptables_default_tail + weight: 99 + keep_unmanaged: '{{ iptables_keep_unmanaged }}' + state: '{{ (iptables_default_tail != "" ) | ternary("present", "absent") }}' + rules: '{{ iptables_default_tail }}' + tags: iptables