slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Plein de trucs

Browse Source
This commit is contained in:
VC
2024-07-05 11:53:08 +02:00
parent 4ebc672d5d
commit 4894a495a0
11 changed files with 116 additions and 178 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
roles/firewall/templates/firewall.j2
View File

@@ -429,7 +429,7 @@ config rule
option family 'ipv4'
config rule
option name 'Allow-FORWARD-Munin-Mikrotik'
option name 'Allow-FORWARD-Munin-Mikrotik-Garregmach'
option src 'dmz'
option src_ip '{{ hostvars['munin.dmz.mateu.be']['ansible_default_ipv4']['address'] }}'
list proto 'tcp'
@@ -440,6 +440,18 @@ config rule
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-FORWARD-Munin-Mikrotik-Derdriu'
option src 'dmz'
option src_ip '{{ hostvars['munin.dmz.mateu.be']['ansible_default_ipv4']['address'] }}'
list proto 'tcp'
list proto 'udp'
option dest 'lan'
option dest_ip '{{ lookup('dig', 'derdriu.home.arpa') }}'
option dest_port '161'
option target 'ACCEPT'
option family 'ipv4'
### IoT Rules
## General Rules
# ICMP