From 4523a78c97519527ba92fb1ea4276f081e7c6629 Mon Sep 17 00:00:00 2001
From: Niklas Yann Wettengel <niyawe@niyawe.de>
Date: Wed, 7 Mar 2018 19:50:28 +0100
Subject: add munin monitoring

---
 roles/configure_iptables/templates/ip6tables.rules | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

(limited to 'roles/configure_iptables/templates/ip6tables.rules')

diff --git a/roles/configure_iptables/templates/ip6tables.rules b/roles/configure_iptables/templates/ip6tables.rules
index 5bb058c..5667a83 100644
--- a/roles/configure_iptables/templates/ip6tables.rules
+++ b/roles/configure_iptables/templates/ip6tables.rules
@@ -31,13 +31,15 @@ COMMIT
 
 # SSH-Server
 -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
+# nginx
+-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
+# munin
+-A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
 
 {% if 'fastd' in group_names %}
 # dns
 -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
 -A INPUT -p udp -m udp --dport 53 -j ACCEPT
-# nginx
--A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 # ntp
 -A INPUT -p udp -m udp --dport 123 -j ACCEPT
 # fastd
@@ -85,8 +87,8 @@ COMMIT
 -A FORWARD -o {{ ansible_default_ipv6.interface }} -j REJECT
 {% if 'ffrl_uplink' in group_names %}
 {% for peer in ffrl_peers %}
-iptables -A FORWARD -i {{ peer.name }} -d 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-iptables -A FORWARD -o {{ peer.name }} -s 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+-A FORWARD -i {{ peer.name }} -d 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+-A FORWARD -o {{ peer.name }} -s 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
 {% endfor %}
 {% endif %}
 COMMIT
-- 
cgit v1.2.3-54-g00ecf