let's try this again with destroy
This commit is contained in:
parent
377a5bcebf
commit
53d62d54f5
@ -4,7 +4,7 @@
|
|||||||
:INPUT DROP
|
:INPUT DROP
|
||||||
:FORWARD DROP
|
:FORWARD DROP
|
||||||
:OUTPUT DROP
|
:OUTPUT DROP
|
||||||
#-A INPUT -m set --match-set nasties src -j DROP
|
-A INPUT -m set --match-set nasties src -j DROP
|
||||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||||
-A INPUT -i lo -j ACCEPT
|
-A INPUT -i lo -j ACCEPT
|
||||||
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
||||||
|
@ -1,9 +1,9 @@
|
|||||||
---
|
---
|
||||||
# This role deploys ipset rulesets to Ubuntu hosts
|
# This role deploys ipset rulesets to Ubuntu hosts
|
||||||
|
|
||||||
- name: Flush any existing ipsets
|
- name: Destroy any existing ipsets
|
||||||
shell:
|
shell:
|
||||||
cmd: /sbin/ipset flush
|
cmd: /sbin/ipset destroy
|
||||||
|
|
||||||
- name: Copy ipset.service
|
- name: Copy ipset.service
|
||||||
copy:
|
copy:
|
||||||
|
Loading…
Reference in New Issue
Block a user