Merge branch 'aardbol-patch-3'
This commit is contained in:
commit
472badee55
18
README.md
18
README.md
|
@ -252,6 +252,24 @@ table inet filter {
|
||||||
- role: ipr-cnrs.nftables
|
- role: ipr-cnrs.nftables
|
||||||
```
|
```
|
||||||
|
|
||||||
|
* Override some of the default defined sets:
|
||||||
|
|
||||||
|
``` yml
|
||||||
|
- hosts: serverXYZ
|
||||||
|
vars:
|
||||||
|
- nft_define:
|
||||||
|
input tcp accepted:
|
||||||
|
desc: Custom SSH port and torrent
|
||||||
|
name: in_tcp_accept
|
||||||
|
value: '{ 2201, 6881 }'
|
||||||
|
input udp accepted:
|
||||||
|
desc: torrent
|
||||||
|
name: in_udp_accept
|
||||||
|
value: '{ 6881 }'
|
||||||
|
roles:
|
||||||
|
- role: ipr-cnrs.nftables
|
||||||
|
```
|
||||||
|
|
||||||
* Use default rules with allow incoming ICMP and count dropped input packets :
|
* Use default rules with allow incoming ICMP and count dropped input packets :
|
||||||
|
|
||||||
`group_vars/first_group` :
|
`group_vars/first_group` :
|
||||||
|
|
Loading…
Reference in New Issue