try to fix iptables

This commit is contained in:
Robert Kaussow 2018-07-11 23:45:32 +02:00
parent 9ab82a3b08
commit 63b9335c03
1 changed files with 7 additions and 13 deletions

View File

@ -19,17 +19,11 @@ unifi_tmp_dir: "{{ unifi_base_dir }}/tmp"
unifi_iptables_enabled: True
unifi_open_ports:
- { flag: "allow_unifi_web", direction: "input", proto: "tcp", port: "8443" }
- { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8080" }
- { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8080" }
- { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8880" }
- { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8880" }
- { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8843" }
- { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8843" }
- { flag: "allow_unifi_comm_in", direction: "input", proto: "tcp", port: "8080" }
- { flag: "allow_unifi_comm_out", direction: "output", proto: "tcp", port: "8080" }
- { flag: "allow_unifi_speedtest", direction: "output", proto: "tcp", port: "6789" }
- { flag: "allow_unifi_stun", direction: "input", proto: "udp", port: "3478" }
- { flag: "allow_unifi_stun", direction: "output", proto: "udp", port: "3478" }
- { flag: "allow_unifi_discover", direction: "input", proto: "udp", port: "10001" }
- { flag: "allow_unifi_discover", direction: "output", proto: "udp", port: "10001" }
- { flag: "allow_unifi_broadcast", direction: "input", proto: "udp", port: "5656:5699" }
- { flag: "allow_unifi_broadcast", direction: "output", proto: "udp", port: "5656:5699" }
- { flag: "allow_ssh", direction: "output", proto: "tcp", port: "22" }
- { flag: "allow_unifi_stun_in", direction: "input", proto: "udp", port: "3478" }
- { flag: "allow_unifi_stun_out", direction: "output", proto: "udp", port: "3478" }
- { flag: "allow_unifi_discover_in", direction: "input", proto: "udp", port: "10001" }
- { flag: "allow_unifi_discover_out", direction: "output", proto: "udp", port: "10001" }
- { flag: "allow_ssh_out", direction: "output", proto: "tcp", port: "22" }