freifunk/ansible-ffibk
9
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
ansible-ffibk/roles/network-iptables-gateway
History
Tobias Hachmer 2f32bd6c1e Restructure network interfaces in order to use ifupdown2 
- rewrite interface templates for batman, fastd, ffrl and meshbridge
- add package ethtool to role server-basic
- use more ipaddr filters and get rid of unneeded variables in dict
ffrl_exit_server
- change ffrl_public_ipv4_nat variable to ip/prefix format
- update readme files
2017-10-03 14:37:39 +02:00
..
handlers Add role network-iptables-gateway 2017-10-02 11:18:16 +02:00
tasks Add role network-iptables-gateway 2017-10-02 11:18:16 +02:00
templates Restructure network interfaces in order to use ifupdown2 2017-10-03 14:37:39 +02:00
vars Add role network-iptables-gateway 2017-10-02 11:18:16 +02:00
README.md Restructure network interfaces in order to use ifupdown2 2017-10-03 14:37:39 +02:00

README.md

Ansible role network-iptables-gateway

Diese Ansible role konfiguriert iptables Regeln für IPv4+IPv6 eines Freifunk Gateways.

  • installiert iptables+iptables-persistent
  • schreibt rules.v4 + rules.v6
  • setzt netfilter sysctl parameter

Benötigte Variablen

  • List sysctl_settings_netfilter (Rollen Variable) ´´´ sysctl_settings_netfilter:
    • name: # sysctl-Parameter value: # zu setzender Wert

´´´

  • Dictionary meshes ´´´ meshes: xx: ... ipv4_network: ...

´´´

  • Variable internet_exit_mtu_ipv4
  • Variable internet_exit_mtu_ipv6
  • Host Variable ffrl_public_ipv4_nat # Format ip-adresse/prefix