slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Suppression des IPv6 VINCI de sortie

Browse Source
This commit is contained in:
VC
2024-07-05 11:53:04 +02:00
parent 596dba87c8
commit cb25dc05ef
2 changed files with 0 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
roles/firewall/templates/firewall.j2
View File

@@ -61,26 +61,6 @@ config rule
option family 'ipv6' option family 'ipv6'
option limit '1000/sec' option limit '1000/sec'
## SSH from VINCI rules
config rule
option name 'Allow-Input-SSH-VINCI'
option src 'wan'
option src_ip '{{ vinci_ipv6_out }}'
option proto 'tcp'
option dest_port '22'
option target 'ACCEPT'
option family 'ipv6'
config rule
option name 'Allow-SSH-VINCI'
option src 'wan'
option src_ip '{{ vinci_ipv6_out }}'
option proto 'tcp'
option dest 'lan'
option dest_port '22'
option target 'ACCEPT'
option family 'ipv6'
### DMZ Rules ### DMZ Rules
## General Rules ## General Rules
# ICMP # ICMP

1
roles/firewall/vars/main.yml
View File

@@ -1 +0,0 @@
vinci_ipv6_out: "2a02:2098:8711:920:740c:70c0:e153:55b6"