Add iptables for sign, drop no longer needed postfix (it's in base)

2013-06-04 16:37:06 +00:00 · 2013-06-04 16:37:06 +00:00 · 9c14bd50f2
commit 9c14bd50f2
parent b069757484
3 changed files with 13 additions and 1 deletions
--- a/files/iptables/iptables.sign
+++ b/files/iptables/iptables.sign
@ -0,0 +1,12 @@
+# {{ ansible_managed }}
+*filter
+:INPUT ACCEPT [0:0]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
+-A INPUT -p icmp -j ACCEPT 
+-A INPUT -i lo -j ACCEPT 
+-A INPUT -j REJECT --reject-with icmp-host-prohibited 
+-A FORWARD -j REJECT --reject-with icmp-host-prohibited 
+COMMIT
+