Robert Kaussow
cfc0a77354
Author: Robert Kaussow <mail@thegeeklab.de>
Date: Mon Jun 20 22:20:10 2022 +0200
chore: switch to main as default branch
2.0 KiB
2.0 KiB
| title | type |
|---|---|
| iptables | docs |
Role to manage iptables firewall.
Default Variables
iptables_app_rules
Default value
iptables_app_rules: []
iptables_app_rules_extra
Default value
iptables_app_rules_extra: []
iptables_custom_rules
Default value
iptables_custom_rules: []
iptables_default_head
Default head (allow) rules.
Default value
iptables_default_head: |
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
iptables_default_tail
Default tail (deny) rules.
Default value
iptables_default_tail: |
-A INPUT -j REJECT
-A FORWARD -j REJECT
iptables_keep_unmanaged
By default this role deletes all iptables rules which are not managed by Ansible. Set this to 'yes', if you want the role to keep unmanaged rules.
Default value
iptables_keep_unmanaged: no
Dependencies
None.