jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-26 15:55:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-09-16 10:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-09-16 10:00:09 +02:00
parent 5f63198ca7
commit 0af60855cc
13 changed files with 32 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
roles/linstor_gateway/tasks/iptables.yml
View File

@@ -5,15 +5,15 @@
name: lingw_nfs_port
state: "{{ (lingw_nfs_src_ip | length > 0) | ternary('present','absent') }}"
rules: |
-A INPUT -m state --state NEW -p tcp --dport 2049 -s {{ lingw_nfs_src_ip | join(',') }} -j ACCEPT
-A INPUT -m state --state NEW -p tcp --dport 111 -s {{ lingw_nfs_src_ip | join(',') }} -j ACCEPT
-A INPUT -m state --state NEW -p udp --dport 111 -s {{ lingw_nfs_src_ip | join(',') }} -j ACCEPT
-A INPUT -m state --state NEW -p tcp --dport 2049 -s {{ lingw_nfs_src_ip | flatten | join(',') }} -j ACCEPT
-A INPUT -m state --state NEW -p tcp --dport 111 -s {{ lingw_nfs_src_ip | flatten | join(',') }} -j ACCEPT
-A INPUT -m state --state NEW -p udp --dport 111 -s {{ lingw_nfs_src_ip | flatten | join(',') }} -j ACCEPT
tags: firewall,drbd
- name: Handle iSCSI port
iptables_raw:
name: lingw_iscsi_port
state: "{{ (lingw_iscsi_src_ip | length > 0) | ternary('present','absent') }}"
rules: "-A INPUT -m state --state NEW -p tcp --dport 3260 -s {{ lingw_iscsi_src_ip | join(',') }} -j ACCEPT"
rules: "-A INPUT -m state --state NEW -p tcp --dport 3260 -s {{ lingw_iscsi_src_ip | flatten | join(',') }} -j ACCEPT"
tags: firewall,drbd