22 lines
852 B
Django/Jinja
22 lines
852 B
Django/Jinja
# {{ ansible_managed }}
|
|
|
|
{% if datacenter_global_networks is defined %}
|
|
ip6tables -N internal-in
|
|
ip6tables -A INPUT -s fe80::/10 -j internal-in
|
|
ip6tables -A INPUT -s fc00::/7 -j internal-in
|
|
{% for net in datacenter_public_ipv6_networks|default([]) %}
|
|
ip6tables -A INPUT -s {{ net }} -j internal-in
|
|
{% endfor %}
|
|
|
|
ip6tables -N internal-out
|
|
ip6tables -A internal-out -p tcp -m multiport --dports 53,80,443,3306:3310 -m comment --comment "common-services" -j ACCEPT
|
|
ip6tables -A internal-out -p udp -m multiport --dports 53,123 -m comment --comment "common-services" -j ACCEPT
|
|
ip6tables -A internal-out -p icmpv6 -j ACCEPT
|
|
|
|
ip6tables -A OUTPUT -d fe80::/10 -j internal-out
|
|
ip6tables -A OUTPUT -d fc00::/7 -j internal-out
|
|
{% for net in datacenter_public_ipv6_networks|default([]) %}
|
|
ip6tables -A OUTPUT -d {{ net }} -j internal-out
|
|
{% endfor %}
|
|
{% endif %}
|