From 6634b16b69f2516302bce21c91cbb7ff37a64a7e Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Wed, 3 Jul 2013 18:37:26 +0000
Subject: [PATCH] Add things needed for the *nat section.
---
files/iptables/iptables | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/files/iptables/iptables b/files/iptables/iptables
index f7b88f8944..910df4e79f 100644
--- a/files/iptables/iptables
+++ b/files/iptables/iptables
@@ -1,10 +1,16 @@
# {{ ansible_managed }}
{% if env == "staging" %}
*nat
+:PREROUTING ACCEPT []
+:POSTROUTING ACCEPT []
+:OUTPUT ACCEPT []
+
# Redirect staging attempts to talk to the external proxy to an internal ip.
# This is primarily for openid in staging which needs to get around proxy
# redirects.
-A OUTPUT -d 209.132.181.14 -j DNAT --to-destination 10.5.126.89
+
+COMMIT
{% endif %}
*filter