rene/ansible-pull
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

changed firewall config for icmp

Browse Source
This commit is contained in:
Rene Mewissen
2025-10-01 16:23:44 +02:00
parent 07781d08d4
commit 94adcbb31f
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/bastionhost/tasks/system_setup/firewall.yml
View File

@@ -16,12 +16,17 @@
proto: tcp proto: tcp
src: 'any' src: 'any'
- name: system setup | firewall | allow monitoring traffic from internal networks - name: system setup | firewall | allow ping (ICMP) from internal networks
community.general.ufw:
rule: allow
src: '192.168.1.0/24' # Passe dies an dein internes Netzwerk an
proto: icmp
- name: system setup | firewall | allow other monitoring traffic from internal networks
community.general.ufw: community.general.ufw:
rule: allow rule: allow
proto: "{{ item.proto }}" proto: "{{ item.proto }}"
port: "{{ item.port | default(omit) }}" port: "{{ item.port | default(omit) }}"
src: '192.168.1.0/24' # Passe dies an dein internes Netzwerk an src: '192.168.1.0/24' # Passe dies an dein internes Netzwerk an
loop: loop:
- { proto: 'icmp', comment: 'Allow Ping' }
- { proto: 'udp', port: '161', comment: 'Allow SNMP' } - { proto: 'udp', port: '161', comment: 'Allow SNMP' }