tpiccioli
/
ansible-roles
forked from ISTI-ansible-roles/ansible-roles
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

iptables rules: add a new conditional.

This commit is contained in:
Andrea Dell'Amico 2019-12-12 20:59:33 +01:00
parent 730885f840
commit b2c25c0f32
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
library/roles/iptables/templates/iptables-rules.v4.j2
View File

@ -225,6 +225,7 @@
{% if postfix_relay_client is defined%}
{% if postfix_relay_client %}
#
{% if not postfix_relay_client_do_not_stop_submission %}
# When we are not a relay server but we want send email using our relay
-A OUTPUT -p tcp -m multiport --dports 25,587,465 -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT
-A OUTPUT -p tcp -m multiport --dports 25,587,465 -m owner --gid-owner postfix -d {{ postfix_relay_host }} -j ACCEPT
@ -233,6 +234,7 @@
{% endif %}
{% endif %}
{% endif %}
{% endif %}
{% if iptables is defined %}
{% if iptables.tcp_rules is defined and iptables.tcp_rules %}
# TCP rules