WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-01 05:51:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

iptables: fix conditional

Browse Source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2023-08-15 12:23:08 -07:00
parent 5936815f75
commit e524963387
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/base/templates/iptables/iptables
View File

@@ -15,7 +15,7 @@
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
# if the host is external, block some ips
{% if datacenter != 'iad2' or external == 'true' %}
{% if datacenter != 'iad2' or external %}
-A INPUT -p all -m set --match-set blocklist src -j REJECT
{% endif %}