From 4fdf3232c3438f6cb53eb5e82dac68982e7a8d0a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gardais=20J=C3=A9r=C3=A9my?= Date: Mon, 7 Aug 2017 17:59:21 +0200 Subject: [PATCH] Add an example playbook. --- README.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/README.md b/README.md index 2962f1e..a6e9552 100644 --- a/README.md +++ b/README.md @@ -123,6 +123,24 @@ table inet firewall { - role: ipr-cnrs.nftables ``` +* Use default rules with allow ICMP and count dropped input packets : + +`group_vars/all` : + +``` yaml +nft_global_group_rules: + 002 icmp: + - ip protocol icmp accept +``` + +`group_vars/first_group` : + +``` yaml +nft_input_group_rules: + 999 count policy packet: + - counter +``` + ## Configuration This role will :