From 90ccb41fd39d93bb8d45d7bf63c5f7196b62d1fb Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Tue, 23 Mar 2021 06:55:44 +0000
Subject: [PATCH] Allow CARP advertisemens from firewall on ns hosts

---
 group_vars/ns.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/group_vars/ns.yml b/group_vars/ns.yml
index 7eab56d..67dd26c 100644
--- a/group_vars/ns.yml
+++ b/group_vars/ns.yml
@@ -7,6 +7,8 @@ firewall_in:
   - {proto: tcp, port: 443}
   - {proto: tcp, port: 853}
   - {proto: tcp, port: 4949, from: [172.20.20.0/22, 81.175.130.44/32]}
+firewall_raw:
+  - pass quick proto carp
 
 ifstated_config: ifstated-ns.conf
 network_vip_interfaces: