ansible-ffibk/roles/network-iptables-gateway/README.md
Tobias Hachmer 63ca114c95 Migrate nested dictionary meshes into a list of dictionaries
- migrate dictionary `ipv6` into two simple lists
 - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00

659 B
Raw Blame History

Ansible role network-iptables-gateway

Diese Ansible role konfiguriert iptables Regeln für IPv4+IPv6 eines Freifunk Gateways.

  • installiert iptables+iptables-persistent
  • schreibt rules.v4 + rules.v6
  • setzt netfilter sysctl parameter

Benötigte Variablen

  • List sysctl_settings_netfilter (Rollen Variable) ´´´ sysctl_settings_netfilter:
    • name: # sysctl-Parameter value: # zu setzender Wert

´´´

  • Dictionary meshes ´´´ meshes:
    • id: xx ... ipv4_network: ...

´´´

  • Variable internet_exit_tcp_mss_ipv4
  • Variable internet_exit_tcp_mss_ipv6
  • Host Variable ffrl_public_ipv4_nat # Format ip-adresse/prefix