add iptables role and define firewall rules for mirror group

roles/iptables/tasks/main.yml

@@ -0,0 +1,35 @@
+---
+
+- name: remove firewalld
+  package:
+    name: firewalld
+    state: removed
+
+- name: install iptables packages
+  package:
+    name: "{{ item }}"
+    state: installed
+  with_items:
+    - iptables
+    - iptables-services
+
+- name: create iptables config from template
+  template:
+    src: "{{ item }}.j2"
+    dest: "/etc/sysconfig/{{ item }}"
+    mode: 0600
+    owner: root
+    group: root
+  notify: "reload {{ item }}"
+  with_items:
+    - iptables
+    - ip6tables
+
+- name: enable iptables service
+  service:
+    name: "{{ item }}"
+    state: started
+    enabled: true
+  with_items:
+    - iptables
+    - ip6tables