You've already forked custom-firewall
28 lines
945 B
Django/Jinja
28 lines
945 B
Django/Jinja
flush
|
|
create {{ banlist_ip4_name }} hash:net maxelem 65536
|
|
{% for ban_ip4 in banlist_ip4 %}
|
|
add {{ banlist_ip4_name }} {{ ban_ip4 }}
|
|
{% endfor %}
|
|
create {{ banlist_ip6_name }} hash:ip family inet6
|
|
{% for ban_ip6 in banlist_ip6 %}
|
|
add {{ banlist_ip6_name }} {{ ban_ip6 }}
|
|
{% endfor %}
|
|
create {{ whitelist_ip4_name }} hash:net maxelem 65536
|
|
{% for white_ip4 in whitelist_ip4 %}
|
|
add {{ whitelist_ip4_name }} {{ white_ip4 }}
|
|
{% endfor %}
|
|
create {{ whitelist_ip6_name }} hash:ip family inet6
|
|
{% for white_ip6 in whitelist_ip6 %}
|
|
add {{ whitelist_ip6_name }} {{ white_ip6 }}
|
|
{% endfor %}
|
|
create {{ whitelist_ports_tcp }} bitmap:port range 0-65535
|
|
{% for port_tcp in whitelist_public_tcp_port %}
|
|
add {{ whitelist_ports_tcp }} {{ port_tcp }}
|
|
{% endfor %}
|
|
create {{ whitelist_ports_udp }} bitmap:port range 0-65535
|
|
{% for port_udp in whitelist_public_udp_port %}
|
|
add {{ whitelist_ports_udp }} {{ port_udp }}
|
|
{% endfor %}
|
|
|
|
{{ ansible_managed | comment }}
|