slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ajout des serveurs de voix

Browse Source
This commit is contained in:
VC
2019-09-05 22:40:23 +02:00
parent 84afea328a
commit d43e55e20a
13 changed files with 391 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

57
roles/firewall/templates/firewall.j2
View File

@@ -142,15 +142,15 @@ config rule
# option target 'ACCEPT'
# option family 'ipv6'
config rule
option name 'n0box2-mumble'
option src 'wan'
option proto 'tcpudp'
option dest 'lan'
option dest_ip '{{ hostvars['n0box2.mateu.be']['ansible_default_ipv6']['address'] }}'
option dest_port '64738'
option target 'ACCEPT'
option family 'ipv6'
#config rule
# option name 'n0box2-mumble'
# option src 'wan'
# option proto 'tcpudp'
# option dest 'lan'
# option dest_ip '{{ hostvars['n0box2.mateu.be']['ansible_default_ipv6']['address'] }}'
# option dest_port '64738'
# option target 'ACCEPT'
# option family 'ipv6'
config redirect
option name 'n0box2-SMTP'
@@ -232,15 +232,15 @@ config redirect
# option dest_port '9987'
# option target 'DNAT'
config redirect
option name 'n0box2-mumble'
option src 'wan'
option src_dport '64738'
option proto 'tcpudp'
option dest 'lan'
option dest_ip '{{ hostvars['n0box2.mateu.be']['ansible_default_ipv4']['address'] }}'
option dest_port '64738'
option target 'DNAT'
#config redirect
# option name 'n0box2-mumble'
# option src 'wan'
# option src_dport '64738'
# option proto 'tcpudp'
# option dest 'lan'
# option dest_ip '{{ hostvars['n0box2.mateu.be']['ansible_default_ipv4']['address'] }}'
# option dest_port '64738'
# option target 'DNAT'
### DMZ Rules
## General Rules
@@ -488,6 +488,27 @@ config rule
option target 'ACCEPT'
option family 'ipv6'
# Allow Mumble traffic
config rule
option name 'Allow-INPUT-mumble'
option src 'wan'
option proto 'tcpudp'
option dest 'dmz'
option dest_ip '{{ hostvars['voice1.dmz.mateu.be']['ansible_default_ipv6']['address'] }}'
option dest_port '64738'
option target 'ACCEPT'
option family 'ipv6'
config redirect
option name 'Allow-INPUT-mumble'
option src 'wan'
option src_dport '64738'
option proto 'tcpudp'
option dest 'dmz'
option dest_ip '{{ hostvars['voice1.dmz.mateu.be']['ansible_default_ipv4']['address'] }}'
option dest_port '64738'
option target 'DNAT'
## Default configuration
config defaults
option syn_flood '1'