Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

base / iptables: simplify conditional even more to perhaps actually work

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-08-15 12:05:59 -07:00
parent fcd3e67484
commit 6ada4829fa
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/base/templates/iptables/iptables
View file

@ -15,7 +15,7 @@
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
# if the host is external, block some ips
{% if datacenter != 'iad2' or ( datacenter == 'iad2' and external == 'true' ) %}
{% if datacenter != 'iad2' or external == 'true' %}
-A INPUT -p all -m set --match-set blocklist src -j REJECT
{% endif %}