Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Distinguish between ipv4 and ipv6.

Browse source
This commit is contained in:
Ralph Bean 2016-03-10 18:32:28 +00:00
parent 4fd88f61f4
commit e36d15bbbe
2 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/base/templates/iptables/ip6tables
View file

@ -20,6 +20,12 @@
# allow ssh - always # allow ssh - always
-A INPUT -m conntrack --ctstate NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m conntrack --ctstate NEW -m tcp -p tcp --dport 22 -j ACCEPT
{% if inventory_hostname in groups['proxies'] %}
{% for friend in friends6 %}
-A INPUT --src {{ friend }} -j DROP
{% endfor %}
{% endif %}
# if the host/group defines incoming tcp_ports - allow them # if the host/group defines incoming tcp_ports - allow them
{% if tcp_ports is defined %} {% if tcp_ports is defined %}
{% for port in tcp_ports %} {% for port in tcp_ports %}

2
roles/base/templates/iptables/iptables
View file

@ -25,7 +25,7 @@
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.41 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.41 -j ACCEPT
{% if inventory_hostname in groups['proxies'] %} {% if inventory_hostname in groups['proxies'] %}
{% for friend in friends %} {% for friend in friends4 %}
-A INPUT --src {{ friend }} -j DROP -A INPUT --src {{ friend }} -j DROP
{% endfor %} {% endfor %}
{% endif %} {% endif %}