diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2013-11-04 07:27:10 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:50:43 +0200 |
| commit | 0dd6a96ce1bf2cef9140d01a5c49eb92e2f8ec6f (patch) | |
| tree | c4e2f42aa56f98d7a0a74045a4fc2848ee18ff8b /roles/common/tasks | |
| parent | b0c2476c07846001fe9758db2be3c20b7fd0db8e (diff) | |
Be more specific regarding the protocol in use for IPSec policies.
We use ESP only, so other protocols shouldn't be ACCEPTed.
Diffstat (limited to 'roles/common/tasks')
| -rw-r--r-- | roles/common/tasks/firewall.yml | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/roles/common/tasks/firewall.yml b/roles/common/tasks/firewall.yml index 5029932..9ed2f72 100644 --- a/roles/common/tasks/firewall.yml +++ b/roles/common/tasks/firewall.yml @@ -23,7 +23,7 @@ owner=root group=root mode=0755 -- name: Make the iptable ruleset persistent +- name: Make the rulesets persistent copy: src=etc/network/{{ item }} dest=/etc/network/{{ item }} owner=root group=root @@ -32,7 +32,6 @@ - if-pre-up.d/iptables - if-post-down.d/iptables - - name: Ensure the firewall is up to date command: /usr/local/sbin/update-firewall.sh -c register: rv |