ansible-ffibk/roles/network-iptables-gateway/README.md

# Ansible role network-iptables-gateway

Diese Ansible role konfiguriert iptables Regeln für IPv4+IPv6 eines Freifunk Gateways.

- installiert iptables+iptables-persistent
- schreibt rules.v4 + rules.v6
- setzt netfilter sysctl parameter

## Benötigte Variablen

- List `sysctl_settings_netfilter` (Rollen Variable)
´´´
sysctl_settings_netfilter:
  - name:       # sysctl-Parameter
    value:      # zu setzender Wert

´´´
- Dictionary `meshes`
´´´
meshes:
  - id: xx
...
    ipv4_network:
...

´´´
- Variable `internet_exit_tcp_mss_ipv4`
- Variable `internet_exit_tcp_mss_ipv6`
- Host Variable `ffrl_public_ipv4_nat` # Format ip-adresse/prefix
-												Add role network-iptables-gateway

 - move netfilter specific sysctl settings

											
										
										
											2017-10-02 11:18:16 +02:00
+								# Ansible role network-iptables-gateway
 								Diese Ansible role konfiguriert iptables Regeln für IPv4+IPv6 eines Freifunk Gateways.
 								- installiert iptables+iptables-persistent
 								- schreibt rules.v4 + rules.v6
 								- setzt netfilter sysctl parameter
 								## Benötigte Variablen
 								- List `sysctl_settings_netfilter` (Rollen Variable)
 								´´´
 								sysctl_settings_netfilter:
 								  - name:       # sysctl-Parameter
 								    value:      # zu setzender Wert
 								´´´
 								- Dictionary `meshes`
 								´´´
 								meshes:
-												Migrate nested dictionary `meshes` into a list of dictionaries

 - migrate dictionary `ipv6` into two simple lists
 - migrate dictionary `forward_zones` into a list

											
										
										
											2017-10-06 22:58:00 +02:00
+								  - id: xx
-												Add role network-iptables-gateway

 - move netfilter specific sysctl settings

											
										
										
											2017-10-02 11:18:16 +02:00
+								...
 								    ipv4_network:
 								...
 								´´´
-												Role network-iptables-gateway: rename var internet_exit_mtu_ipv[4|6] to internet_exit_tcp_mss_ipv[4|6]

											
										
										
											2017-10-04 12:55:29 +02:00
+								- Variable `internet_exit_tcp_mss_ipv4`
 								- Variable `internet_exit_tcp_mss_ipv6`
-												Restructure network interfaces in order to use ifupdown2

- rewrite interface templates for batman, fastd, ffrl and meshbridge
- add package ethtool to role server-basic
- use more ipaddr filters and get rid of unneeded variables in dict
ffrl_exit_server
- change ffrl_public_ipv4_nat variable to ip/prefix format
- update readme files

											
										
										
											2017-10-03 14:37:39 +02:00
+								- Host Variable `ffrl_public_ipv4_nat` # Format ip-adresse/prefix