diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2013-10-31 19:01:39 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:50:34 +0200 |
| commit | d4c07ed2674cc3c46e3940129a476f50e1931a2a (patch) | |
| tree | 17c1cf246b80044a0bf2b52d3022a388a6b21ce5 /roles/common/tasks | |
| parent | a3be458262fdeeaae2acaf098e47ecabe62cad09 (diff) | |
Don't save dynamic rules.
These rules are automatically included by third-party servers such as
strongSwan or fail2ban.
Diffstat (limited to 'roles/common/tasks')
| -rw-r--r-- | roles/common/tasks/firewall.yml | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/roles/common/tasks/firewall.yml b/roles/common/tasks/firewall.yml index d15384a..b1cd9b1 100644 --- a/roles/common/tasks/firewall.yml +++ b/roles/common/tasks/firewall.yml @@ -23,15 +23,15 @@ owner=root group=root mode=0755 -- name: Ensure the firewall is up to date - command: /usr/local/sbin/update-firewall.sh -c - register: rv - changed_when: rv.rc - notify: - - Unsafe firewall update - - name: Make the iptable ruleset persistent copy: src=etc/network/if-pre-up.d/iptables dest=/etc/network/if-pre-up.d/iptables owner=root group=root mode=0755 + +- name: Ensure the firewall is up to date + command: /usr/local/sbin/update-firewall.sh -c + register: rv + # A non-zero return value will make ansible stop and show stderr. This + # is what we want. + changed_when: rv.rc |