Kevin Carter eb5debbdbb
move mnaio network group var because it's shared
Change-Id: I3c85564def49f3d0da76c55dc4356cbf16a25d63
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2017-08-10 19:13:14 -05:00

51 lines
1.3 KiB
YAML

---
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
mnaio_host_iptables_rules:
- table: filter
chain: INPUT
protocol: tcp
match: tcp
destination_port: 67
jump: ACCEPT
- table: filter
chain: INPUT
protocol: udp
match: udp
destination_port: 67
jump: ACCEPT
- table: filter
chain: INPUT
protocol: udp
match: udp
destination_port: 53
jump: ACCEPT
- table: filter
chain: INPUT
protocol: udp
match: udp
destination_port: 53
jump: ACCEPT
- table: filter
chain: FORWARD
in_interface: vm-br-dhcp
jump: ACCEPT
- table: filter
chain: FORWARD
out_interface: vm-br-dhcp
jump: ACCEPT
- table: nat
chain: POSTROUTING
out_interface: "{{ masquerade_interface | default(default_interface) }}"
jump: MASQUERADE