ansible-role-firewall
ansible-role-firewall copied to clipboard
Made iptables initialization a bit more flexible
This enables configuration of which (if any) rules and chains should be removed. Enables usage alongside other tools that (dynamically) insert their rules like fail2ban or docker. The default behavior is following the previous functionality - removing all rules and non-default chains.
With proper configuration, this should solve issues in #31
Could be really interesting to prevent fail2ban & docker chain deletion each time that rules are updated.
This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!
Please read this blog post to see the reasons why I mark pull requests as stale.
This is not stale. Something like this is very helpful when running on hosts using Docker, especially since this resets the DOCKER-USER
chain, which might have important additional rules added.
This issue is no longer marked for closure.
This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!
Please read this blog post to see the reasons why I mark pull requests as stale.
This pull request has been closed due to inactivity. If you feel this is in error, please reopen the pull request or file a new PR with the relevant details.
any chance that this is merged upstream? We are hitting problems when applying this role in docker hosts
This would solve the Docker problem nicely. @geerlingguy Could you please have a look (and prefetably explain to the bot it should not close it again ...). Thank you for your time!
is this going to be re-opened?
@geerlingguy is this going to be re-opened? Having the same problem with docker as probably everyone and this would solve that nicely.
This feature would also be really useful for us
This pull request is no longer marked for closure.
Hi @geerlingguy, is this still planned? Anything missing?
It has been a few years! Can we merge this? I need that functionality as well
I tried resolving the merge conflicts—can someone confirm the changes are still working? Maybe I can merge it before the new year :D