{"repo":"geerlingguy/ansible-role-firewall","free":true,"listed":false,"github":"https://github.com/geerlingguy/ansible-role-firewall","clone":"git clone https://github.com/geerlingguy/ansible-role-firewall.git","description":"Ansible Role - iptables Firewall configuration.","language":"Shell","stars":582,"topics":["ansible","role","firewall","iptables","linux","security","rules","centos","ubuntu","rhel"],"license":"MIT","category":"security-tools","readme_excerpt":"Ansible Role: Firewall (iptables) Installs an iptables-based firewall for Linux. Supports both IPv4 ( iptables ) and IPv6 ( ip6tables ). This firewall aims for simplicity over complexity, and only opens a few specific ports for incoming traffic (configurable through Ansible variables). If you have a rudimentary knowledge of iptables and/or firewalls in general, this role should be a good starting point for a secure system firewall. After the role is run, a firewall init service will be available on the server. You can use service firewall [start stop restart status] to control the firewall. Requirements None. Role Variables Available variables are listed below, along with default values (see defaults/main.yml ): Controls the state of the firewall service; whether it should be running ( firewall state ) and/or enabled on system boot ( firewall enabled at boot ). Whether to flush all rules and chains whenever the firewall is restarted. Set this to false if there are other processes managing iptables (e.g. Docker). The template to use when generating firewall rules. A list of TCP or UDP ports (respectively) to open to incoming traffic. Forward src port to dest port, either TCP or UDP (respectively). Any additional (custom) rules to be added to the firewall (in the same format you would add them via command line, e.g. iptables [rule] / ip6tables [rule] ). A few examples of how this could be used: See Iptables Essentials: Common Firewall Rules and Commands for more examples. Wheth","default_branch":null,"files":null,"tree":[],"storefront":"/r/geerlingguy","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/geerlingguy/ansible-role-firewall/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}