33 lines
No EOL
770 B
YAML
33 lines
No EOL
770 B
YAML
---
|
|
|
|
- name: Accept FORWARD with tcp limit 1/second and syn
|
|
ansible.builtin.iptables:
|
|
chain: FORWARD
|
|
protocol: tcp
|
|
syn: match
|
|
limit: 1/second
|
|
jump: ACCEPT
|
|
comment: Accept FORWARD with tcp limit 1/second and syn
|
|
state: present
|
|
become: yes
|
|
|
|
- name: Accept FORWARD with udp limit 1/second
|
|
ansible.builtin.iptables:
|
|
chain: FORWARD
|
|
protocol: udp
|
|
limit: 1/second
|
|
jump: ACCEPT
|
|
comment: Accept FORWARD with udp limit 1/second
|
|
state: present
|
|
become: yes
|
|
|
|
- name: Accept FORWARD with icmp limit 1/second
|
|
ansible.builtin.iptables:
|
|
chain: FORWARD
|
|
protocol: icmp
|
|
icmp_type: echo-request
|
|
limit: 1/second
|
|
jump: ACCEPT
|
|
comment: Accept FORWARD with icmp limit 1/second
|
|
state: present
|
|
become: yes |