summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/iptables/services.j2
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-11 22:39:48 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:53:03 +0200
commit42140bf82da25565e7653afbcef2cc8aa7a8538a (patch)
tree53a8256c2f88d7d54b231b6dca41e9b06b424027 /roles/common/templates/etc/iptables/services.j2
parent1422d37b350428b1524016026290ad80724b016d (diff)
Fix NTP configuration.
We've yet to get authenticated time, though.
Diffstat (limited to 'roles/common/templates/etc/iptables/services.j2')
-rw-r--r--roles/common/templates/etc/iptables/services.j24
1 files changed, 3 insertions, 1 deletions
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 3a470fa..db7edf1 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -7,8 +7,10 @@
out tcp 80,443 # HTTP/HTTPS
out udp 53 # DNS
out udp 67 # DHCP
-
{% if 'NTP-master' in group_names %}
+in udp 123 # NTP
+out udp 123 # NTP
+{% else %}
out udp 123 123 # NTP
{% endif %}