ISTI-ansible-roles
/
ansible-role-linux-firewall
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Move some comments inside their conditionals.

This commit is contained in:
Andrea Dell'Amico 2022-08-01 12:26:58 +02:00
parent f9b971c2ce
commit 6a807aea89
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/iptables-rules.v4.j2
View File

@ -129,8 +129,8 @@
{% endif %} {% endif %}
{% if psql_firewall_enabled %} {% if psql_firewall_enabled %}
# PostgreSQL
{% if psql_db_port is defined %} {% if psql_db_port is defined %}
# PostgreSQL
{% if psql_listen_on_ext_int is defined and psql_listen_on_ext_int %} {% if psql_listen_on_ext_int is defined and psql_listen_on_ext_int %}
{% if psql_global_firewall is defined %} {% if psql_global_firewall is defined %}
{% for cidr in psql_global_firewall %} {% for cidr in psql_global_firewall %}
@ -285,8 +285,8 @@
-A INPUT -m pkttype --pkt-type multicast -d {{ orientdb_hazelcast_multicast_group }} -j ACCEPT -A INPUT -m pkttype --pkt-type multicast -d {{ orientdb_hazelcast_multicast_group }} -j ACCEPT
-A INPUT -m state --state NEW -s {{orientdb_hazelcast_multicast_group}} -p tcp -m tcp --dport {{ orientdb_hazelcast_multicast_port }} -j ACCEPT -A INPUT -m state --state NEW -s {{orientdb_hazelcast_multicast_group}} -p tcp -m tcp --dport {{ orientdb_hazelcast_multicast_port }} -j ACCEPT
{% endif %} {% endif %}
# Postfix
{% if postfix_relay_server is defined and postfix_relay_server%} {% if postfix_relay_server is defined and postfix_relay_server%}
# Postfix
# #
# These are only needed on the machines that act as relay servers # These are only needed on the machines that act as relay servers
# #
@ -304,6 +304,7 @@
-A OUTPUT -p tcp -m multiport --dports 25,587,465 -j DROP -A OUTPUT -p tcp -m multiport --dports 25,587,465 -j DROP
{% endif %} {% endif %}
{% if postfix_relay_client is defined and postfix_relay_client%} {% if postfix_relay_client is defined and postfix_relay_client%}
# Postfix
# #
# When we are not a relay server but we want send email using our relay # When we are not a relay server but we want send email using our relay
-A OUTPUT -p tcp -m multiport --dports 25,587,465 -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT -A OUTPUT -p tcp -m multiport --dports 25,587,465 -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT