infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

base / iptables: drop nat and raw chains from here, as f32 does not like them

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-05-25 13:30:48 -07:00
parent 211ec8c3e4
commit 9f9eba3716
1 changed files with 0 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/base/templates/iptables/iptables.releng
View file

@ -3,15 +3,6 @@
# NOTE: Chaging this template updates iptables on all releng hosts :)
# Please check with sysadmin-main before pushing out an update here.
#
*nat
:PREROUTING ACCEPT []
:POSTROUTING ACCEPT []
:OUTPUT ACCEPT []
COMMIT
*raw
:PREROUTING ACCEPT []
:OUTPUT ACCEPT []
COMMIT
*filter
:INPUT DROP []
:FORWARD ACCEPT []