From fbde929fce7405f018fc66bb5796bf0a16292913 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 30 Oct 2013 21:06:51 +0100 Subject: Configure v4 and v6 iptable rulesets. --- roles/common/templates/etc/iptables/services.j2 | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 roles/common/templates/etc/iptables/services.j2 (limited to 'roles/common/templates/etc') diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2 new file mode 100644 index 0000000..b1b7f0f --- /dev/null +++ b/roles/common/templates/etc/iptables/services.j2 @@ -0,0 +1,13 @@ +# {{ ansible_managed }} +# Do NOT edit this file directly! +# +# direction protocol destination port source port +# (in|out|inout)[46]? (tcp|udp|..) (port|port:port|port,port) (port|port:port|port,port) + +inout udp 500 500 # ISAKMP + +in tcp {{ ansible_ssh_port|default('22') }} # SSH + +out tcp 80,443 # HTTP/HTTPS +out udp 53 # DNS +out udp 67 # DHCP -- cgit v1.2.3