summaryrefslogtreecommitdiff
path: root/roles/configure_iptables/templates/iptables.rules
diff options
context:
space:
mode:
authorNiklas Yann Wettengel <niyawe@niyawe.de>2021-09-16 23:09:03 +0200
committerNiklas Yann Wettengel <niyawe@niyawe.de>2021-09-16 23:09:03 +0200
commit0fdb16e7b0758a835faf8cefe9ff112889379cc9 (patch)
treee9d535f1dc547c50b3f8807f69ab94a227fccc0d /roles/configure_iptables/templates/iptables.rules
parent1705b3ed49160ba8356a811a694c1a707847469f (diff)
rm ww net
Diffstat (limited to 'roles/configure_iptables/templates/iptables.rules')
-rw-r--r--roles/configure_iptables/templates/iptables.rules4
1 files changed, 0 insertions, 4 deletions
diff --git a/roles/configure_iptables/templates/iptables.rules b/roles/configure_iptables/templates/iptables.rules
index 6d7fce1..924320d 100644
--- a/roles/configure_iptables/templates/iptables.rules
+++ b/roles/configure_iptables/templates/iptables.rules
@@ -38,7 +38,6 @@ COMMIT
# SSH-Server
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
# iperf3
--A INPUT -p tcp -m tcp -s 10.30.0.0/18 --dport 5201 -j ACCEPT
-A INPUT -p tcp -m tcp -s 10.222.0.0/16 --dport 5201 -j ACCEPT
{% if 'fastd' in group_names %}
@@ -54,7 +53,6 @@ COMMIT
# ntp
-A INPUT -p udp -m udp --dport 123 -j ACCEPT
# fastd / wg
--A INPUT -s 10.30.0.0/18 -p udp -m udp --dport 10010:10023 -j DROP
-A INPUT -s 10.222.0.0/16 -p udp -m udp --dport 10010:10023 -j DROP
-A INPUT -p udp -m udp --dport 10010:10023 -j ACCEPT
# wireguard_mesh
@@ -86,8 +84,6 @@ COMMIT
-A FORWARD -o {{ ansible_default_ipv4.interface }} -j REJECT
-A FORWARD -d 10.222.0.0/16 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -s 10.222.0.0/16 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
--A FORWARD -d 10.30.0.0/18 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
--A FORWARD -s 10.30.0.0/18 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT
*nat