Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add iptables for sign, drop no longer needed postfix (it's in base)

Browse source
This commit is contained in:
Kevin Fenzi 2013-06-04 16:37:06 +00:00
parent b069757484
commit 9c14bd50f2
3 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
files/iptables/iptables.sign Normal file
View file

@ -0,0 +1,12 @@
# {{ ansible_managed }}
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

1
inventory/group_vars/sign
View file

@ -1,3 +1,4 @@
--- ---
freezes: true freezes: true
postfix_group: sign postfix_group: sign
iptables: $files/iptables/iptables.sign

1
playbooks/groups/sign.yml
View file

@ -20,7 +20,6 @@
- include: $tasks/base.yml - include: $tasks/base.yml
- include: $tasks/rkhunter.yml - include: $tasks/rkhunter.yml
- include: $tasks/motd.yml - include: $tasks/motd.yml
- include: $tasks/postfix_basic.yml
- include: $tasks/sign_setup.yml - include: $tasks/sign_setup.yml
handlers: handlers: