summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/iptables
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/templates/etc/iptables')
-rw-r--r--roles/common/templates/etc/iptables/services.j25
1 files changed, 5 insertions, 0 deletions
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index f382ea3..4e78d1e 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -13,6 +13,11 @@ out udp 123 123 # NTP
{% endif %}
in tcp {{ ansible_ssh_port|default('22') }} # SSH
+{% if 'LDAP-provider' in group_names %}
+in tcp 636 # LDAPS
+{% elif 'MX' in group_names or 'lists' in group_name %}
+out tcp 636 # LDAPS
+{% endif %}
{% if 'MX' in group_names %}
in tcp 25 # SMTP
{% endif %}