ansible-role-firewall icon indicating copy to clipboard operation
ansible-role-firewall copied to clipboard

Made iptables initialization a bit more flexible

Open mprasil opened this issue 7 years ago • 15 comments

This enables configuration of which (if any) rules and chains should be removed. Enables usage alongside other tools that (dynamically) insert their rules like fail2ban or docker. The default behavior is following the previous functionality - removing all rules and non-default chains.

With proper configuration, this should solve issues in #31

mprasil avatar Apr 06 '17 13:04 mprasil

Could be really interesting to prevent fail2ban & docker chain deletion each time that rules are updated.

romaindequidt avatar May 25 '18 12:05 romaindequidt

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

stale[bot] avatar Mar 06 '20 03:03 stale[bot]

This is not stale. Something like this is very helpful when running on hosts using Docker, especially since this resets the DOCKER-USER chain, which might have important additional rules added.

geerlingguy avatar Mar 15 '20 17:03 geerlingguy

This issue is no longer marked for closure.

stale[bot] avatar Mar 15 '20 17:03 stale[bot]

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

stale[bot] avatar Jun 13 '20 18:06 stale[bot]

This pull request has been closed due to inactivity. If you feel this is in error, please reopen the pull request or file a new PR with the relevant details.

stale[bot] avatar Jul 13 '20 19:07 stale[bot]

any chance that this is merged upstream? We are hitting problems when applying this role in docker hosts

pescobar avatar Jul 24 '20 11:07 pescobar

This would solve the Docker problem nicely. @geerlingguy Could you please have a look (and prefetably explain to the bot it should not close it again ...). Thank you for your time!

spacekpe avatar Sep 19 '20 17:09 spacekpe

is this going to be re-opened?

pescobar avatar Sep 21 '20 12:09 pescobar

@geerlingguy is this going to be re-opened? Having the same problem with docker as probably everyone and this would solve that nicely.

brnck avatar Mar 26 '21 08:03 brnck

This feature would also be really useful for us

pescobar avatar Mar 26 '21 08:03 pescobar

This pull request is no longer marked for closure.

stale[bot] avatar Mar 26 '21 13:03 stale[bot]

Hi @geerlingguy, is this still planned? Anything missing?

staticdev avatar Jun 29 '22 04:06 staticdev

It has been a few years! Can we merge this? I need that functionality as well

katomaso avatar Dec 01 '22 12:12 katomaso

I tried resolving the merge conflicts—can someone confirm the changes are still working? Maybe I can merge it before the new year :D

geerlingguy avatar Dec 01 '22 15:12 geerlingguy