foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

iptables: Fix deprecation warnings

Browse source
This commit is contained in:
Timo Makinen 2022-12-13 20:15:59 +00:00
parent 354b5b293c
commit f65e12037d
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/iptables/templates/ip6tables.j2
View file

@ -13,10 +13,10 @@
{% for rule in firewall_in %} {% for rule in firewall_in %}
{% if rule.from is defined %} {% if rule.from is defined %}
{% for from in rule.from %} {% for from in rule.from %}
{% if not from | ipv4 and not from | ipv6 %} {% if not from | ansible.utils.ipv4 and not from | ansible.utils.ipv6 %}
{% set from = lookup('dig', from) %} {% set from = lookup('dig', from) %}
{% endif %} {% endif %}
{% if from | ipv6 %} {% if from | ansible.utils.ipv6 %}
-A INPUT -m state --state NEW -m {{ rule.proto }} -p {{ rule.proto }} -s {{ from }} --dport {{ rule.port }} -j ACCEPT -A INPUT -m state --state NEW -m {{ rule.proto }} -p {{ rule.proto }} -s {{ from }} --dport {{ rule.port }} -j ACCEPT
{% endif %} {% endif %}
{% endfor %} {% endfor %}

4
roles/iptables/templates/iptables.j2
View file

@ -13,10 +13,10 @@
{% for rule in firewall_in %} {% for rule in firewall_in %}
{% if rule.from is defined %} {% if rule.from is defined %}
{% for from in rule.from %} {% for from in rule.from %}
{% if not from | ipv4 and not from | ipv6 %} {% if not from | ansible.utils.ipv4 and not from | ansible.utils.ipv6 %}
{% set from = lookup('dig', from) %} {% set from = lookup('dig', from) %}
{% endif %} {% endif %}
{% if from | ipv4 %} {% if from | ansible.utils.ipv4 %}
-A INPUT -m state --state NEW -m {{ rule.proto }} -p {{ rule.proto }} -s {{ from }} --dport {{ rule.port }} -j ACCEPT -A INPUT -m state --state NEW -m {{ rule.proto }} -p {{ rule.proto }} -s {{ from }} --dport {{ rule.port }} -j ACCEPT
{% endif %} {% endif %}
{% endfor %} {% endfor %}