v0.0.5
This commit is contained in:
@@ -3,7 +3,7 @@
|
||||
- name: Copy nftables configuration template
|
||||
template:
|
||||
src: "nftables.conf.j2"
|
||||
dest: /etc/nftables.con
|
||||
dest: /etc/nftables.conf
|
||||
|
||||
- name: Enable nftables
|
||||
service:
|
||||
|
||||
@@ -5,9 +5,9 @@ flush ruleset
|
||||
table inet filter {
|
||||
chain input {
|
||||
type filter hook input priority filter;
|
||||
{% for port in open_ports %}
|
||||
iifname "{{ port.interface }}" {{ port.protocol }} dport {{ port.port }} accept
|
||||
{% endfor %}
|
||||
{% for port in open_ports %}
|
||||
iifname "{{ port.interface }}" {{ port.protocol }} dport {{ port.port }} accept;
|
||||
{% endfor %}
|
||||
}
|
||||
chain forward {
|
||||
type filter hook forward priority filter;
|
||||
|
||||
Reference in New Issue
Block a user