xoxys.iptables/defaults/main.yml
Robert Kaussow 34d9ec0a27
Some checks failed
continuous-integration/drone/push Build is failing
add app-specific iptables list
2019-10-28 20:39:05 +01:00

27 lines
793 B
YAML

---
# @var iptables_default_head:description: Default head (allow) rules.
iptables_default_head: |
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
# @var iptables_default_tail:description: Default tail (deny) rules.
iptables_default_tail: |
-A INPUT -j REJECT
-A FORWARD -j REJECT
iptables_custom_rules: []
iptables_app_rules: []
iptables_app_rules_extra: []
# @var iptables_keep_unmanaged:description: >
# By default this role deletes all iptables rules which are not managed by Ansible.
# Set this to 'yes', if you want the role to keep unmanaged rules.
# @end
iptables_keep_unmanaged: no