ISTI-ansible-roles
/
ansible-role-linux-firewall
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Another variable fix.

This commit is contained in:
Andrea Dell'Amico 2020-11-30 16:51:29 +01:00
parent c312ea379b
commit 5e513ca2f9
1 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
templates/iptables-rules.v4.j2
View File

@ -200,6 +200,15 @@
{% endif %}
{% endif %}
{% if jgroups_cluster_enabled %}
# tomcat/jboss/wildfly cluster
-A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT
-A INPUT -m state --state NEW -p tcp -m tcp --dport {{ jgroups_multicast_port }} -j ACCEPT
{% if jgroups_multicast_net is defined %}
-A INPUT -d {{ jgroups_multicast_net }} -j ACCEPT
{% endif %}
{% endif %}
{% if docker_swarm is defined and docker_swarm %}
{% for cidr in docker_swarm_allowed_hosts %}
-A INPUT -m state --state NEW -s {{ cidr }} -p tcp -m tcp --dport 2377 -j ACCEPT
@ -261,14 +270,7 @@
{% endif %}
{% endif %}
{% endif %}
{% if jgroups_cluster_enabled %}
# tomcat/jboss/wildfly cluster
-A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT
-A INPUT -m state --state NEW -p tcp -m tcp --dport {{ jgroups_multicast_port }} -j ACCEPT
{% if hybernate_multicast_net is defined %}
-A INPUT -d {{ jgroups_multicast_net }} -j ACCEPT
{% endif %}
{% endif %}
{% if orientdb_hazelcast_multicast_enabled is defined and orientdb_hazelcast_multicast_enabled %}
# orientdb hazelcast multicast rules
-A INPUT -m pkttype --pkt-type multicast -d {{ orientdb_hazelcast_multicast_group }} -j ACCEPT