summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/iptables
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/templates/etc/iptables')
-rw-r--r--roles/common/templates/etc/iptables/services.j24
1 files changed, 3 insertions, 1 deletions
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 3a470fa..db7edf1 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -7,8 +7,10 @@
out tcp 80,443 # HTTP/HTTPS
out udp 53 # DNS
out udp 67 # DHCP
-
{% if 'NTP-master' in group_names %}
+in udp 123 # NTP
+out udp 123 # NTP
+{% else %}
out udp 123 123 # NTP
{% endif %}