33 lines
770 B
YAML
33 lines
770 B
YAML
|
---
|
||
|
|
|
||
|
|
- name: Accept FORWARD with tcp limit 1/second and syn
|
||
|
|
ansible.builtin.iptables:
|
||
|
|
chain: FORWARD
|
||
|
|
protocol: tcp
|
||
|
|
syn: match
|
||
|
|
limit: 1/second
|
||
|
|
jump: ACCEPT
|
||
|
|
comment: Accept FORWARD with tcp limit 1/second and syn
|
||
|
|
state: present
|
||
|
|
become: yes
|
||
|
|
|
||
|
|
- name: Accept FORWARD with udp limit 1/second
|
||
|
|
ansible.builtin.iptables:
|
||
|
|
chain: FORWARD
|
||
|
|
protocol: udp
|
||
|
|
limit: 1/second
|
||
|
|
jump: ACCEPT
|
||
|
|
comment: Accept FORWARD with udp limit 1/second
|
||
|
|
state: present
|
||
|
|
become: yes
|
||
|
|
|
||
|
|
- name: Accept FORWARD with icmp limit 1/second
|
||
|
|
ansible.builtin.iptables:
|
||
|
|
chain: FORWARD
|
||
|
|
protocol: icmp
|
||
|
|
icmp_type: echo-request
|
||
|
|
limit: 1/second
|
||
|
|
jump: ACCEPT
|
||
|
|
comment: Accept FORWARD with icmp limit 1/second
|
||
|
|
state: present
|
||
|
|
become: yes
|