From 42140bf82da25565e7653afbcef2cc8aa7a8538a Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Fri, 11 Jul 2014 22:39:48 +0200 Subject: Fix NTP configuration. We've yet to get authenticated time, though. --- roles/common/templates/etc/iptables/services.j2 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'roles/common/templates/etc/iptables/services.j2') diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2 index 3a470fa..db7edf1 100644 --- a/roles/common/templates/etc/iptables/services.j2 +++ b/roles/common/templates/etc/iptables/services.j2 @@ -7,8 +7,10 @@ out tcp 80,443 # HTTP/HTTPS out udp 53 # DNS out udp 67 # DHCP - {% if 'NTP-master' in group_names %} +in udp 123 # NTP +out udp 123 # NTP +{% else %} out udp 123 123 # NTP {% endif %} -- cgit v1.2.3